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CLIENT-SERVER INDEPENDENT INTERMEDIARY MECHANISM 

FIELD OF THE INVENTION 

The present invention relates to client-server communication, and more 
specifically, to using an independent intermediary mechanism between a client and a 
server. 

BACKGROUND 

The World-Wide Web (WWW, W3, the Web) is an Internet client-server 
hypertext distributed information retrieval system. An extensive user community has 
developed on the Web since its introduction. 

Figure 1 is a block diagram of a prior art client-server system. The client A 110 
can access destination servers DS1-DS3 150-170. Similarly, other clients B and C, 120 
130, can access the destination servers DS1-3 150-170. Each destination server may 
provide different services, information, or other data to the user. 

On the Web everything (documents, menus, indices) is represented to the user as 
hypertext objects in hypertext markup language (HTML) format, or as Java, or 
JavaScript objects, or other data types. Hypertext links refer to other documents by 
their uniform resource identifiers (URIs). The client program, known as a browser, e.g. 
NCSA Mosaic, Netscape Navigator, runs on the user's computer and provides two basic 
navigation operations: to follow a link or to send a query to a server. Users access the 
web through these browsers. 

Users often access the web from multiple locations. Users may access the web 
from their office, at different locations at work/at home, or on the road. Libraries and 
Internet cafes make web access available on a walk-in basis as well. 

A user accesses a server by typing the URI of the server into the browser's 
address window. The browser then connects to the server corresponding to this URI. 
Another method of accessing a web site is by selecting the web site from the list of 
bookmarks. The list of bookmarks is resident in the browser in the user's computer. 
Thus, if a user wishes to have similar bookmarks on multiple computers, he or she must 
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manually copy the bookmarks and transfer them between the computers. This process 
is inconvenient. 

Furthermore, many servers use cookies to store information about the user. This 
information may include the user name, password, previous interests, etc. These 
cookies are also stored in the user's browser. Again, this means that if the user is 
accessing the Internet from multiple computers, the user's cookies have to be duplicated 
into multiple computers. This process is inconvenient. 

Many users have multiple accounts on different computer systems. For example, 
a user may have an account with a bank, an e-mail account, a personalized portal site 
account, and an account on an e-commerce server. Currently, the users must log into 
each of these accounts by remembering and providing his or her user name and 
password. For security, each of these user names and passwords should be different. 
Remembering different names and passwords is inconvenient to the user. Thus, a 
method for a simple log-in into various accounts from any computer would be 
advantageous- 
Most clients and servers support "forms" which allow the user to enter arbitrary 
text as well as selecting options from customizable menus and on/off switches. As 
more business is transacted on the Web, forms are proliferating. The forms may 
include forms for requesting further information, for ordering items from the Web, for 
registering for a Web site, etc. However, the user generally can not get a copy of the 
information filled into the form. The user can either print the page when the form is 
filled in, generating a paper copy, or rely on the server to respond in a manner that 
permits the user to make a record of the information entered in to the form. A method 
of tracking information filled into forms would be advantageous. Furthermore, 
vendors may respond with an order number or other useful information. The user can 
keep a copy of this page, which is generally only temporarily available, by printing it, or 
copying down the information provided. A method of attaching this vendor response 
to the original order information and making both available to the user would be 
advantageous. 

Furthermore, currently, the user has to fill out each of these forms separately. 
Generally, the forms request the same types of information, i.e. name, address, 
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telephone number, e-mail address, etc. The user has to enter all of this information for 
each form. This is repetitious and takes time. Additionally, if such information as 
credit card number or social security number is requested, the user has to pull out the 
credit card and copy a long string of numbers. This makes errors likely. Furthermore, 
the user has to verify that a Web site that requests a credit card number or similar 
confidential information is of the appropriate level of security for the user to feel 
comfortable sending the information over the Web. An improved method of filling out 
forms would be advantageous. 

SUMMARY OF THE INDENTION 

A method and apparatus of a client-server independent intermediary mechanism 
(IIM) is described. The method comprises displaying a frame including a user interface 
of the IIM (EM frame), and a second frame framing a destination server display area 
(DSDA). The method further comprises retrieving data for display from a destination 
server, and instrumenting the data prior to display such that future data retrieved from 
a destination server is displayed in the DSDA, without writing over the IIM frame. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is illustrated by way of example, and not by way of 
limitation, in the figures of the accompanying drawings and in which like reference 
numerals refer to similar elements and in which: 

Figure 1 is a block diagram of a prior art client-server system. 

Figure 2 is a block diagram of one embodiment of the client-server system 
including the independent intermediary mechanism. 

Figure 3A is a block diagram of one embodiment of the client-server system 
including multiple independent intermediary mechanisms. 

Figure 3B is a block diagram of another embodiment of the client-server system 
including multiple independent intermediary mechanisms. 

Figure 4 is a block diagram of one embodiment of the independent intermediary 
mechanism. 

Figure 5 is a block diagram of one embodiment of the layout of the user interface 
of the independent intermediary mechanism. 
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Figure 6 is a flowchart of an overview of using the independent intermediary 
mechanism. 

Figure 7 is a flowchart of one embodiment of the process of displaying 
information from a destination server through the independent intermediary 
mechanism. 

Figure 8 illustrates one embodiment of the user interface of the independent 
intermediary mechanism. 

Figure 9 illustrates another embodiment of the user interface of the independent 
intermediary mechanism. 

Figure 10 is a flowchart of one embodiment of the form fill functionality. 

Figure 11 is a flowchart of one embodiment of the learning process in the 
database. 

Figure 12A is a flowchart of one embodiment of adding accounts. 
Figure 12B is a flowchart of one embodiment of accessing an account through an 
'auto-log-in feature. 

Figure 13 is a flowchart of one embodiment of the transaction management 
functionality. 

Figure 14 illustrates one embodiment of the listing of transactions. 
Figure 15A is a flowchart of one embodiment of selection of a home page or a 
bookmark. 

Figure 15B is a flowchart of one embodiment of using the bookmark 
functionality. 

Figure 15C is a flowchart of one embodiment of using the history functionality. 
Figure 16A-C are tables illustrating examples of redirecting references to DS 
through EM. 

Figure 17 is a table illustrating examples of making the IBM user interface frame 
persistent. 

Figure 18 is a table illustrating examples of accessing cookies from the AM. 
Figure 19 is a table illustrating examples of preserving top frame or IIM frame 
integrity for DS. 
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DETAILED DESCRIPTION 

A client-server independent intermediary mechanism is described. The 
independent intermediary mechanism (IIM) mediates information exchanged between 
a client and servers by having the client-server communication pass through the IIM. 
This allows the IIM to offer various services. For one embodiment, the IIM may be used 
to have a central web-accessible set of bookmarks. The IIM may further provide 
tracking of transactions on the web, providing a user-accessible transaction record. The 
IIM may further be used to fill in various forms automatically. The IIM may further be 
used to access multiple accounts, such as e-mail accounts, bank accounts, etc. with a 
single button. The IIM may further be used to store the user's profile, including 
passwords to various pages, etc. These and other uses of the IIM are described below. 

Figure 2 is a block diagram of one embodiment of the client-server system 
including the independent intermediary mechanism. Multiple clients A-C 210, 215, 220 
access multiple destination servers (DSs) 280, 285, 290, through the independent 
intermediary mechanism (IIM) 250. Client A 210 is described as an example. It is to be 
understood that multiple clients are implemented in similar ways. 

Client A 210 accesses the IIM 250. For one embodiment, this occurs when the 
user of the client A 210 accesses the web site hosting the IIM 250. When the IIM 250 is 
accessed, a new client component (CC) 230 is established. The client component(s) 230, 
235, 240 and the server component 260 together form the DM 250. For one embodiment, 
the IIM 250 is located on a server accessed by the client A 210 through an Internet 
connection. For another embodiment, the EM 250 is located within the local Intranet of 
client A 210. For yet another embodiment, the IIM 250 is located on the client's own 
computer. 

For one embodiment, the client component 230 is established on the local 
computer of the client 210. For another embodiment, the client component 230 is on a 
server, or on a third computer system. The client component 230 is created in response 
to the client 210 connecting to the IIM 250. 

The client A 210 has a connection to the server component 260 through the client 
component 230. For one embodiment the client A 210 also establishes a direct 
connection with the server component 260. This direct connection may be used to 
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communicate certain information directly between the server component 260 and the 
client A 210. The client 210 accesses the destination servers DS1-3 280, 285, 290 through 
the IIM 250. For one embodiment, all of the communication between the destination 
server DS1 280 and the client A 210 is routed through the IIM 250. For another 
embodiment, certain communications are routed directly between the client A 210 and 
the destination server 280. For example, certain large images that do not invoke other 
images or other data may be routed directly in order to speed up processing. 

The number of client components 230, 235, 240 depends on the number of clients 
210, 215, 220 coupled to the server component 260 at any one time. For one 
embodiment, the server component 260 consists of multiple components that act 
together. A block diagram of one embodiment of the IIM 250 may be found in Figure 4, 
below. 

Figure 3 A is a block diagram of one embodiment of the client-server system 
including multiple independent intermediary mechanisms 350, 360. Each IIM 350, 360 
is shown having a corresponding server component, 355, 365. For another embodiment, 
the server components 355, 365 may be located on a single server, or within a single 
EDM. Having server components 355, 365 coupled together may serve multiple 
purposes. For example, if a single IIM 350 has too many users connected to it, the IIM 
350 may redirect users to a second DM 360. For another embodiment, a user may log on 
to a local IIM 350, for speed reasons, and the local IIM 350 may connect to the user's 
"home" IIM 360 to retrieve the user's data. For yet another embodiment, the user can 
connect to their "home" IIM 350, which is remote, and the "home" IIM 350 may redirect 
the user to a local IIM 360 and send the user's data to the local IIM 360. In this way, the 
user's connection to the IIM 350, 360 may be optimized. 

Figure 3B is a block diagram of another embodiment of the client-server system 
including multiple independent intermediary mechanisms. In this example, a client 310 
is coupled to two IIMs 350, 360. Generally, the client 310 first connects to the first IIM 
350. Then, through the user interface of the first EM, the client 310 connects to the 
second IIM 360. This may be advantageous if, for example, the first IIM 350 and second 
IIM 360 provide different services. Thus, for example, one IIM 360 may provide 
additional account management features, while the other IIM 350 provides form-fill 
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features. By connecting to both IIMs 350, 360, in series, the user has access to the 
features provided by both IIMs 350, 360. 

Figure 4 is a block diagram of one embodiment of the independent intermediary 
mechanism. The IIM 400 has three layers. The lowest layer of the IIM 400 is the core 
engine 410. The core engine 410 includes a server component SC and a client 
component CC The Server Component, for one embodiment, is resident on the server, 
and handles all remote actions. The Client Component, for one embodiment, is resident 
on the client's system, while the client is connected to the IIM 400. For one 
embodiment, the client component is automatically removed from the client's system 
when the client disconnects from the IIM 400. The lowest layer also includes a Cookie 
Manager 413, for managing any cookies received from and being sent to the destination 
server. The use of such cookies is discussed in more detail below. Furthermore, the 
lowest layer may include a Activation Manager 416. The Activation Manager 416 
determines if information is being transmitted by the destination server. For one 
embodiment, the Activation Manager 416 further determines if information is being 
initiated by a user's action. Information transmitted between the DS and the client is 
instrumented by the IIM 400, as will be described below. The Activation Manager 416 
detects when the IIM 400 should review communication between the client and the DS. 

The second layer is the application/UI framework layer 420. The application/UI 
framework layer 420 establishes the basic user interface and IIM engine. The 
application/UI framework layer 420 creates a persistent frame for the IIM 400. For one 
embodiment, the application/UI framework layer 420 further includes an 
instrumenting manager 425, for instrumenting data flowing from the destination server 
to the client, through the IIM 400. This process of instrumenting is described in more 
detail below. 

The third layer is the applications layer. The applications layer includes multiple 
applications. The applications listed here are listed as an example, and are not a 
complete list. The applications layer, for example, may include a Navigation Manager 
430. The Navigation Manager 430 permits a user to navigate from destination server to 
destination server using the EM 400. The applications layer may further include a 
Transaction Manager 440. 
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The Transaction Manager 440 tracks the user's transactions, stores them, and 
makes them available for the user's review. Transactions are interactions in which a 
user submits information to a destination server, for example to order an item, ask a 
question, or otherwise interact with the destination server. The Transaction Manager 
440 tracks the data submitted by the user, and any response from the destination server, 
and permits the user to access this information. 

The Account Manager 450 permits the user to log into a variety of accounts, from 
e-mail to stock trading accounts, using a single click. The Account Manager 450 further 
permits the user to add accounts to this list. The Form Manager 460 permits the user to 
fill out forms encountered on destination servers via a single click. This is extremely 
useful for users that transact business on the web, and often fill out identical forms 
many times. The Profile Manager 470 is the database of the user's personal information. 
This information may be edited by the user, and is used to fill in forms via the form 
manager 460. The Database Manager 480 manages the various databases of the IIM 400. 

The Bookmark Manager 490 permits the user to manage bookmarks maintained 
within the IIM 400. Having bookmarks, URIs of pages the user wishes to save, available 
in the IIM 400 permits the user to access his or her bookmark list from any computer. 

The History Manager 495 permits the user to manipulate the history list of sites 
the user has previously visited. For one embodiment, the user can change the 
permanence of the history lists, for another embodiment, the user can delete certain 
sites from the history list. 

The Homepage Manager 497 permits the user to set a homepage that is 
displayed when the user initially connects to the server providing the IIM 400. 

As can be seen, the IIM provides multiple functionalities. A single IIM 400 may 
include all of the functionalities described above, additional functionalities, or some 
subset of these functionalities. The IIM's functionality may be extended with additional 
features. 

Figure 5 is a block diagram of one embodiment of the layout of the user interface 
of the independent intermediary mechanism. The client browser application window 
510 is displayed by a browser, such as Netscape Navigator or Microsoft Internet 
Explorer. The client side display area (CSDA) 520 is the display area available in the 
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browser application window 510. Most browsers have a toolbar and other displays 
within the browser application window 510. For one embodiment, the IIM is designed 
to minimize the area of the browser application window that is not the CSDA 520. 

The CSDA 520 includes a toolbar frame 530. Although the tool bar frame 530 is 
referred to as a frame, for one embodiment, the tool bar frame 530 may be implemented 
in a non-frame format. For one embodiment, the tool bar may be implemented as a 
separate window. For another embodiment, the tool bar may be implemented as part 
of the display, not as a frame. 

The CSDA 520 further includes a destination server display area (DSDA) 540. 
The DSDA 540 is the area in which all information from destination servers is 
presented. 

The CSDA 520 further includes a communications frame 550. The 
communications frame 550 is for communication between the client side and server side 
of the EM. Generally, the communications frame 550 is hidden from the user's view. 
"Thus, the user would not see the communication between the client component and the 
server component. 

Figure 6 is a flowchart of an overview of using the independent intermediary 
mechanism. At block 610, the user connects to the IIM through the client browser. For 
one embodiment, this is done by typing the address of the IIM into the address window 
of the browser. For one embodiment, the IIM may be the preset homepage of the user, 
or a bookmark in the client browser. 

At block 615, the user connects to a destination server (DS) through the EM. For 
one embodiment, this is done by typing the address of the destination server into the 
address window of the EM. For another embodiment, the user may select an address 
from a history list of previously visited sites, from a bookmark list in the EM, or the 
destination server may be a preset homepage in the EM. The EM records the DS in the 
history database. The history database tracks the web sites that the user has visited in 
the past. Such a history database may be useful to permit backtracking, or to visit 
previously visited sites. For one embodiment, this history database is maintained for a 
fixed duration of time, or a user preset period of time- For another embodiment, the 
history database is maintained indefinitely. 
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At block 620, the process changes the reference to DS to go through the IIM and 
load the information from the DS in the DSD A, maintaining the IIM frame. This is 
described in more detail below. 

At block 625, the IIM determines whether the user submitted information to the 
destination server. For one embodiment, the actual test is whether information that is 
"sensitive" or "of interest" is submitted to the DS. For example, if a user selected a 
radio button for the next display, the response would be "no" even though some 
information was submitted. For one embodiment, the answer to this query is yes only if 
information that is in the user's profile is submitted. For one embodiment, the answer 
to this query is provided by the user through the user interface. If the answer is yes, the 
process continues to block 630. 

At block 630, the user's communication with the DS is recorded in the user's 
transaction database. For example, if the user ordered an item from a destination server 
site, the form that was filled in by the user, including all of the information filled in, 
would be recorded in the transaction database. This transaction database is available to 
the user. The process then continues to block 635. If, at block 625, the answer was no, 
the process continues directly to block 635. 

At block 635, the IIM forwards the communication, i.e. the information 
submitted by the user, to the DS. This communication includes relevant cookies. A 
cookie is a packet of information sent by a destination server to a browser and then sent 
back by the browser each time it accesses that server. Cookies can contain any arbitrary 
information the server chooses and they are used to maintain state between otherwise 
stateless transactions. Generally, cookies are maintained in a userf s browser. However, 
for one embodiment, the IIM maintains the user's cookies. This permits a user to log 
into a site, and have the appropriate cookies available, no matter from what web client 
device or client browser the user accesses the site. 

At block 640, the process determines whether the destination server responded 
to the user's submission of information. For one embodiment, some destination servers 
respond, with a thank you page, other data pertaining to order number, shipping code, 
delivery date, etc., when information is submitted to them. If the destination server 
responds at block 640, the process continues to block 645. 
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At block 645, the DS's response is recorded in the user's transaction database, 
and associated with the user's submitted information. Thus, when the user reviews the 
transaction, he or she can review the entire transaction, including the DS's response. 

At block 650, the DM instruments the DS's response, stores any cookies returned 
by the DS, and forwards the response to the client browser. One embodiment of this 
process is illustrated in more detail in Figure 7, below. Tables of some results of the 
process of instrumenting are illustrated in Figures 16A-C, and Figures 17-19. 

At block 655, the process tests whether the user continues to browse through the 
IIM. The user continues to browse, the process returns to block 615. Otherwise, the 
process ends at block 660. 

Figure 7 is a flowchart of one embodiment of the process of instrumenting data 
displayed from a destination server through the independent intermediary mechanism. 
For one embodiment, Figure 7 is a more detailed flowchart of block 650, in Figure 6. At 
block 705, the IIM receives a communication from the DS. For one embodiment, this 
occurs in response to a user contacting a DS through the EM. 

At block 710, the process tests whether there is a cookie or multiple cookies 
associated with the communication. Cookies may be sent by the DS to the client, to be 
stored on the client browser. If a cookie is associated with the communication, the 
process continues to block 715. At block 715, the IIM cookie database is updated with 
the new cookie. For one embodiment, cookies sent by the DS to the client browser are 
handled through the EM. Thus, the IIM would store all of the cookies for a DS, and 
give the DS its cookies. This is advantageous because it permits a user to access a DS 
from any computer, and all of the user's cookies are immediately available through the 
EM. The process then continues to block 725. If no cookies were associated with the 
communication, the process continues directly to block 725. 

At block 725, the process parses the code to find the next keyword. For one 
embodiment, keywords are tags in HTML, or known keywords in Java or JavaScript. 
Figures 16-19 illustrate some examples of keywords that may trigger this process. For 
another embodiment, keywords may be any triggering signal that indicates that an 
action may be performed. 
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At block 730, the process tests whether a keyword was found. If no keyword 
was found, the process continues to block 735, and ends. If the communication has no 
remaining keywords, the document has been fully instrumented, and is ready for 
display to the user. For one embodiment, certain communications may have no 
keywords at all. In that case, this process would end after a single pass. For yet another 
embodiment, under some circumstances, the process may ignore certain keywords. 
Certain references are not altered in the communication. For example, references that 
call static images, images that do not communicate information to the user and do not 
have embedded references, may be of no interest. For example, if the keyword calls a 
large passive figure with multiple components, the process may ignore the entire figure, 
by tagging figure related communications, and exit out of this process even if keywords 
remain. By altering only those references that are of interest, the process may be sped 
up. If a keyword was found, the process continues to block 740. 

At block 740, the process tests whether the keyword is an attempt to access a 
cookie from the cookie database. If the keyword is an attempt to access a cookie, the 
process continues to block 745. At block 745, the access attempt is changed to fetch the 
cookie from the IIM's cookie database. Some examples of this process are provided in 
Figure 18. For one embodiment, the IIM's cookie database may access the client 
browser's cookie database in order to determine whether there are additional cookies 
on the client browser. For one embodiment, the IIM can, with the user's permission, 
copy cookies from the browser cookie database to the EM. This simplifies moving from 
direct access of a DS to accessing a DS through the HM. The process then continues to 
block 750. 

If the keyword is not an attempt to access a cookie, the process continues directly 
to block 750. 

At block 750, the process tests whether the keyword is an attempt to access the 
top frame or IIM frame. If the keyword is an attempt to access the top frame or IIM 
frame, the process continues to block 755. At block 755, the access attempt is changed to 
access the top area of the destination server display area (DSD A). Some examples of 
this process are provided in Figure 17. The process then continues to block 760. 
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If the keyword is not an attempt to access the top of IIM frame, the process 
continues directly to block 760. 

At block 760, the process tests whether the keyword is a reference to the 
destination server. If the keyword is a reference to the destination server, the process 
continues to block 765. At block 765, the reference is changed to be fetched through the 
IIM. Some examples of this process are provided in Figure 16A-C The process then 
continues to block 770. 

If the keyword is not a reference to the destination server, the process continues 
directly to block 770. 

At block 770, the process tests whether the keyword is an attempt to access data 
from the top frame or IIM frame. If the keyword is an attempt to access data from the 
top frame or IIM frame, the process continues to block 775. At block 775, the access 
attempt is changed to fetch data from the topmost frame of the DSDA. Some examples 
of this process are provided in Figure 19. The process then returns to block 725, and 
parses to find the next keyword. 

For one embodiment, the above process may be triggered by a user. For 
example, a user may select a link, activate a JavaScript function, or otherwise initiate 
communication between the destination server and the client. The same process may 
occur in response to a cookie being sent or received, or a keyword being found as 
described above with respect to Figure 7. 

Figure 8 illustrates one embodiment of the user interface of the independent 
intermediary mechanism. The user interface includes a browser toolbar 805. For one 
embodiment, the IIM may configure the browser such that the browser toolbar area 805 
is not displayed when the IIM is active. The display area 810 of the browser includes 
the DM toolbar 820, a hidden communications frame 815, and the destination server 
display area 845. 

The IIM toolbar 820 includes the known browser controls 825, such as back, 
forward, refresh, stop, etc. Additional browser controls 825 may be added. The toolbar 
820 further includes an address entry control 830, where a user can type a destination 
server address in order to access the DS. 
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The IIM toolbar 820 may further include buttons, or other selection mechanisms 
that permit a user to configure and use the IIM. The buttons may include Home, 
selecting a user's preset homepage, etc. The homepage is preset using the Set Home 
button 852. The buttons may further include the Mall button, giving one-button access 
to shopping. The buttons may further include Tags 860, displaying a list of a user's 
bookmarks. Bookmarks are added by selecting the Tag Address while visiting a web 
site, or by selecting the Tag Address button 862, and typing the address of a location to 
be bookmarked. 

The buttons may further include Accounts 865, permitting single-button log-on 
to a variety of accounts. These accounts are added with the Add Account button 867, as 
will be described below. 

The buttons may also include a Transactions button 870, that permits a user to 
review his or her transactions. This is illustrated in the destination server display area 
845 of Figure 8. The Profile button 875 permits the user to enter his or her personal 
data. The Fill-Form button 880 permits the user to fill in a form using the personal data 
from the user's profile or by using information submitted previously using the same 
form. If a form is displayed on the destination server display area 845, and the user 
selects the fill-form button 880, the form is automatically filled in with the user's 
information. The Clear Form button 882 permits a user to remove the information filled 
into a form. This provides an additional level of security to the user. 

The Admin button 885 provides access to account administration services. For 
one embodiment, the Admin button 885 is only available to those users who are 
authorized administrators. For one embodiment, the Admin button 885 is only 
displayed if the user is authorized to access account administration services. 

The toolbar 820 further includes a Bye button 890, which logs off the user from 
the EM. The toolbar 820 illustrated is exemplary. The content and organization of the 
buttons on the toolbar 820 may be changed without changing the invention. 

Figure 9 illustrates another embodiment of the user interface of the independent 
intermediary mechanism. As can be seen, the user interface may be flexibly 
implemented. Certain features may be provided by one interface and not provided by 
another. Furthermore, the look and feel of the user interface may be altered. The user 



WO 00/70500 



-15- 



PCT7US00/11946 



may, for example, access all of the IIM features through pull-down menus, such as the 
pull-down menu 935, or radio buttons instead of buttons. One skilled in the art 
understands other types of user interface changes that may be made without departing 
from the broader spirit and scope of the invention as set forth in the appended claims. 

Figure 10 is a flowchart of one embodiment of the form fill functionality. At 
block 1010, a document with a form is displayed. For one embodiment, this is a result 
of a user accessing a destination server location that includes a form. This form may be 
an order form, an information request form, or any other form that may be encountered 
on the Web. 

At block 1015, the user requests the form-fill function through the IIM user 
interface. For one embodiment, the user presses the form-fill button. For another 
embodiment, the form fill may be automated. For yet another embodiment, the user 
can select whether the form fill function is automatically engaged. 

At block 1020, the process determines whether the form is in the user's 
transaction database. The user's transaction database has records of previously 
accessed and filled-in forms for the particular user. The transaction database may 
maintain such records for a limited time, or the user may delete transaction records. 
Thus, merely because a user has been to a particular site previously may not mean that 
the form is in the user's transaction database. If the form is in the user's transaction 
database, the process continues to block 1040, otherwise, the process continues to block 
1025. 

At block 1025, the process determines whether the form is in the form database. 
The form database is maintained by the EM and includes "known" forms. Such known 
forms have associations between form control identifiers in the form and profile items. 
Thus, for example, a form control identifier that is labeled "name" may have a link to 
the "First Name Last Name" item in the user profile. If the form is known, the process 
continues to block 1030. At block 1030, the form control identifiers in the form are filled 
in from the user profile. The process then returns to block 1055. 

If the form is not known, the process continues to block 1035. At block 1035, the 
form controls are identified, based on the name of each control. Each control name is 
associated with entries in the user profile. The process then continues to block 1030, 
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and the data is filled into the form from the user profile. For one embodiment, block 
1035 is skipped. This type of "guessing" may be user enabled, or may be only 
attempted for forms that are similar to known forms. 

At block 1020, if the form was found in the user's transaction database, the 
process continued to block 1040. At block 1040, the process tests whether any data in 
the user profile has been changed since the transaction in the transaction database was 
recorded. Transaction records are dated, as are changes to the user profile. A user 
profile may be changed by the user, for example, to change a credit card expiration 
date, number, or home address. If a user profile change of a relevant field is dated after 
the transaction record date, the process continues to block 1045, otherwise, the process 
continues directly to block 1050. 

At block 1045, the changed information is filled in from the user profile. In this 
way, the user only had to update his or her records once, in the profile, and that change 
is carried through the EM. For one embodiment, this step may be skipped. For another 
embodiment, this step may be user enabled. 

At block 1050, the remaining form control identifiers in the form are filled with 
data from the transaction database. The process then continues to block 1055. 

At block 1055, the filled-in form is displayed to the user, and the user is 
permitted to edit the data in the form. The user, for example, may not wish to provide 
certain data to a destination server. The user may chose to erase such data. 
Alternatively, the form may request data that is not found in the user's profile. The 
user may chose to fill in such data. 

At block 1060, the user submits the form to the destination server. For one 
embodiment, the IIM stores the information submitted to the server in the user's 
transaction database. This is illustrated in Figure 13 below. At block 1065, the process 
ends. For one embodiment, the user may optionally select whether to use the user 
profile, transaction database, or both, and in what order, for form fill functions. 

Figure 11 is a flowchart of one embodiment of the learning process in the 
database. At block 1110, a privileged user connects to the IIM. For one embodiment, 
this privileged user is an employee of the group maintaining the DM. For another 
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embodiment, this "user'' is an artificial intelligence unit that is used to identify forms, as 
will be described below. Such intelligent recognition programs are known in the art. 

At block 1120, the privileged user accesses a destination server page with a form 
through the I1M. At block 1130, the EM displays a user interface for cataloguing the 
form. 

At block 1140, the user maps each form control to an element in the user profile 
object. The user profile is set up to contain a large number of possible data elements. 
Each form control should have a corresponding profile element. If no profile element is 
found for a form control, that form control may be tagged as "form specific/' For one 
embodiment, multiple elements in the user profile may be associated with a single form 
control, or vice versa. 

At block 1150, other information about the form is added. This information may 
include such information as the address of the form, whether the connection with the 
destination server that serves the form is a secure connection, whether the form is of a 
particular classification, etc. 

At block 1160, the user submits the information to the DM. 

At block 1170, the DM updates the form identification and form description in 
the form database to include the information added by the user. For one embodiment, 
the updating is a periodic batch updating. For one embodiment, a single central form 
database is maintained. In that instance, the IIM's updating may include sending the 
new form to other IIMs. Alternatively, each IIM may maintain its own separate form 
database. For yet another embodiment, an IIM may have a central form database, and a 
separate internal form database. This may be useful, for example, for an IIM 
implemented within a company which has the general form database for pages 
accessed outside the company, and a separate internal database for internal web page 
forms. 

At block 1180, the process ends. Of course, the privileged user may enter 
multiple entries, and may start the process again at block 1120. 

Figure 12A is a flowchart of one embodiment of adding accounts. At block 1210, 
the user connects to the DM through a client browser. At block 1220, the user accesses a 
destination server through the DM. For one embodiment, the user accesses the account 
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log-in page of the DS. This may be, for example, the account log-in page of the user's 
bank, of a portal, or of any other DS. 

At block 1230, the user requests to add the account to the user's account 
database. Each user may have an account database, which includes a list of accounts 
the user can access with a single click. 

At block 1235, the process determines whether the user has submitted log-in 
information to the account log-in page. If the user has not submitted the information, 
the process continues to block 1240, and the user is prompted to complete the log-in 
process. For one embodiment, if the account log-in process includes multiple pages, the 
user may indicate the end of the log-in process by pressing a certain key, or through 
other means. The process then continues to block 1245. If the user has submitted all of 
the log-in information, the process continues to block 1245 directly. 

At block 1245, the account entry is added to the user's account database. The 
account log-in information and data of account entry creation are recorded. For one 
embodiment, further information may be recorded. For yet another embodiment, only 
the user's log-in procedure is recorded. 

At block 1250, the account information is submitted to the DS for login. At block 
1255, the process ends. 

Figure 12B is a flowchart of one embodiment of accessing an account through an 
auto-log-in feature. At block 1260, the user connects to the EM At block 1265, the user 
accesses the account auto-log-in feature using the IIM user interface. For one 
embodiment, this is done by the user pushing the account button. 

At block 1270, the user selects an account to log into. For one embodiment, the 
user may have multiple accounts. In that instance, the IIM displays the accounts that 
the user has. For another embodiment, if the user only has a single account, that 
account is automatically selected when the user accesses the auto-log-in feature. 

At block 1275, the EM retrieves login information from the user's account 
database. As discussed above, the user's previous account log-in is monitored and 
recorded. This information is retrieved at block 1275. 
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At block 1280, the HM sends the log-in information to the appropriate 
destination server to log-in the user. The account information includes the address of 
the DS. The IIM accesses the DS as a client, and sends the user's information. 

At block 1285, the DM instruments the DS's response and sends it to the user's 
browser for display. As discussed above, the response is instrumented such that 
references of interest are routed through the IIM. The user can now use the account, as 
usual. At block 1290, the process ends. 

Figure 13 is a flowchart of one embodiment of the transaction management 
functionality. At block 1310, the user connects to the HM. 

At block 1320, the user transmits information in a form to the destination server. 
For one embodiment, the user first accesses a destination server page including a form 
through the IIM. This form may be an order form, an e-mail form, or any other type of 
form. The user then fills in the form and submits it to the DS. For one embodiment, the 
user may use the form-fill method described above to fill-in the form. 

At block 1330, the process determines whether the user sent the user's e-mail 
address to the DS. The user may submit his or her e-mail address so the DS can send 
responses directly to the user's e-mail. For example, certain systems may send 
confirmation e-mails or alert notices to the user via e-mail. If the user submitted his or 
her e-mail address, the process continues to block 1340. Otherwise, the process 
continues directly to block 1350. 

At block 1340, the e-mail address submitted to the DS is altered. Specifically, the 
e-mail address is bifurcated, generated two e-mails. The first e-mail goes to the user's e- 
mail address, as entered. The second e-mail goes to the HM. The second e-mail 
includes in its address the HM and the transaction tag that identifies the transaction 
number to which the e-mail belongs. This allows the EM to handle the e-mail. The 
process then returns to block 1350. 

At block 1350, the HM records a transaction in the user's transaction database 
and associates the submitted information with the transaction. The transaction, for one 
embodiment, has a transaction number. 
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At block 1360, the IIM determines whether there is a response from the DS. If 
there is a response, the process continues to block 1370. Otherwise, the process 
continues directly to block 1380. 

At block 1370, the IIM records the response from the DS in the user's transaction 
database. For one embodiment, the destination server may respond to the user. This 
response is associated with the transaction record. In this way, the user may review the 
transaction record, including the response. 

At block 1380, further information is recorded about the transaction. For one 
embodiment, this information may include the date and time of the transaction, and 
other information. 

At block 1390, any notes, data, or e-mails received with the transaction tag are 
attached to the transaction. This may occur at any time, while the transaction is being 
recorded, or after that. The user may attach any data to the transaction, and the IIM 
may automatically attach any e-mails received with the transaction tag. 

At block 1395, the process ends. 

Figure 14 illustrates one embodiment of the listing of transactions. The 
transaction list 1410 may be sorted by date, using a menu 1425. The transactions may 
also be sorted by type 1435. For one embodiment, alternative methods of searching 
transactions may also be implemented. For example, a user may search the transaction 
records for purchases from a certain destination server. 

Each transaction record may include one or more of the following: date 1420, 
transaction type 1430, and description 1440 of the transaction. The record may further 
include the place 1450, the location from where the transaction was recorded. The user 
may add and edit additional notes 1460. Furthermore, the user may also add 
attachments 1415 to the transaction record. For example, the user may attach e-mails, 
documents, video, or other types of data. For one embodiment, e-mails may be 
redirected through the IIM and automatically attached to the transaction. 

The vendor response 1470 is also recorded. The information the user provided 
1480 during the transaction is also included in the transaction record. The transaction 
may further include the information whether the transaction belongs to one of the 
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accounts 1490 in the user's account database. The user is permitted to delete selected 
transaction records using a delete button 1465. 

Figure 15A is a flowchart of one embodiment of selection of a home page. The 
user connects to the IIM at block 1505. 

At block 1510, the user accesses a destination server page through the IIM. At 
block 1515, the process determines which option the user is selecting. 

If the user is selecting the add bookmark option, the process continues to block 
1525. At block 1525, the address of the page is added to the user's bookmark database. 
This database is accessible to the user, to permit the user to access various web sites 
without typing the address of the site. The process then continues to block 1530, and 
ends. 

If the user selected the set home page option at block 1515, the address of the 
page is set as the user's homepage. The user's homepage is called up when the user 
initially connects to the EM. For one embodiment, the homepage is preset. For another 
embodiment, the user may not alter the homepage, and the homepage is customizable 
but includes advertising. The process then continues to block 1530, and ends. 

Figure 15B is a flowchart of one embodiment of using the bookmark 
functionality. At block 1535, the user connects to the EM. At block 1540, the user 
requests access to the user's bookmarks through the IIM user interface. For one 
embodiment, the user requests the bookmarks by pressing the "Tags" button on the 
user interface. 

At block 1545, the IIM generates a bookmark list from the user's bookmark 
database, and sends the list to the client browser to display. For one embodiment, the 
bookmark list is displayed in the destination server display area. For another 
embodiment, the bookmark list is displayed in a separate window, or a separate frame. 

At block 1550, the user selects a bookmark to access a destination server page. 

At block 1555, the IIM fetches the page address corresponding to the selected 
bookmark from the bookmark database. The bookmark database includes the actual 
address of the bookmark. 

At block 1560, the destination server page is fetched by the IIM. The data from 
the destination server is instrumented and is sent to the client browser for display. In 
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this way, the user can access bookmarks stored in the IIM's bookmark database. The 
process then continues to block 1565, and ends. 

Figure 15C is a flowchart of one embodiment of using the history functionality. 
At block 1570, the user connects to the IIM. 

At block 1575, the user requests access to the history list through the IIM user 
interface. The history list includes the sites the user previously visited. For one 
embodiment, the history list is maintained for only a period of time, such as thirty days. 
For another embodiment, the history list is maintained indefinitely, and may be purged 
by the user. 

At block 1580, the IIM generates a history list from the user's history database, 
and sends the history list to the client browser for display. For one embodiment, the 
history list is displayed in the destination server display area. For another embodiment, 
the history list is displayed in a separate window, or a separate frame 

At block 1582, the user selects a list entry to access the destination server page. 
At block 1585, the IIM fetches the page address from the history database. The page 
address is referenced through the IIM. 

At block 1590, the IIM fetches the destination server page, instruments the 
communication, and sends the data to the client browser for display. At block 1595, the 
process ends. In this way, the IIM permits a user to access a variety of services through 
the IIM. 

Figures 16A-C show sample alterations of references from the destination server 
by the EM. Figures 16A-C illustrate changes to HTML, HTTP protocol, JavaScript, and 
Java. For one embodiment, this technique may be expanded to new languages and 
other types of interfaces. The data that is normally communicated directly between a 
Destination Server (DS) and client browser is altered by the EM, as shown by Figures 
16A-C. For one embodiment, some data may be transmitted directly between the DS 
and the client browser, without passing through the DM. 

For one embodiment, the IIM performs a subset of the message modifications 
required for redirection and downloads the client component to the client's browser, 
which performs the remaining subset of message modifications on the client machine. 
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Together these two subsets of message modifications provide a complete solution for 
using an independent intermediary mechanism between a client and a server. 

The modification of HTTP communication messages for redirection occurs on 
both the IIM and the client browser using the client component. The points at which the 
message modifications occur are called "HTTP control points". 

Figures 16A-C illustrate examples of HTTP control points that occur on the client 
browser and the IIM. For HTTP message documents, description of modification code 
covers the three programming languages that are most widely used today for HTTP 
communication: HTML, JavaScript and Java. For another embodiment, the DM utility 
may be broadened to include HTTP control points in other programming languages 
used for HTTP message documents. For one embodiment, the protocol modified in the 
messages is defined by the HTTP specification standard. One skilled in the art would 
understand how to expand the technique described to different programming 
languages or message protocols. 

Figure -7 is a table illustrating examples of making the IIM user interface frame 
persistent. The IIM prevents DS's from overwriting the user interface of the IIM. This 
permits the user to access the EM regardless of what DS he or she is accessing. 

Figure 18 is a table illustrating examples of accessing cookies from the EM. 
Generally, the destination server and destination server data on the client system access 
the cookie cache on the client's computer system. The IIM modifies the access 
mechanisms to access cookies from the IIMs cookie database. 

Figure 19 is a table illustrating examples of preserving top frame or IIM frame 
integrity for DS. Objects are often hung from the top frame of the client browser. The 
IIM changes the references to the top frame to create or access these objects to references 
to the top frame of DSDA. In this way, the objects are appropriately handled. 

Figures 16-19 list some sample alterations resulting from the code instrumenting 
described above. Alternative methods of altering the code may be used. One skilled in 
the art knows how to implement different changes. 

In the foregoing specification, the invention has been described with reference to 
specific exemplary embodiments thereof. It will, however, be evident that various 
modifications and changes may be made thereto without departing from the broader 
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spirit and scope of the invention as set forth in the appended claims. The specification 
and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive 
sense. 
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CLAIMS 

What is claimed is: 

1. A method of accessing data through an independent intermediary 
mechanism (IIM), the method comprising: 

displaying a frame including a user interface of the EM, the frame framing a 
destination server display area (DSD A); 

retrieving destination server data (DS data) for display from a destination server; 

instrumenting the DS data prior to display such that future data retrieved from 
the destination server is displayed in the DSD A, without writing over the frame 
displaying the user interface of the EM. 

2. The method of claim 1, further comprising: 

altering requests for cookies such that cookies relevant to the destination server 
are accessed from the EM. 

3. The method of claim 1, further comprising: 

determining if a user's portion of the IIM includes a cookie for the destination 
server, and serving the cookie to the destination server and to the DS data, if the user's 
portion includes the cookie. 

4. The method of claim 3, further comprising determining if a browser 
includes the cookie, and if the browser includes the cookie: 

serving the cookie to the destination server and the DS data; and 
saving the cookie in the user's portion of the EM. 

5. The method of claim 2, wherein cookies received from the destination 
server or created by the DS data are stored in a user's portion of the EM. 

6. The method of claim 1, wherein at least one reference in the DS data to 
other DS data is redirected through the EM. 

7. The method of claim 1, wherein the step of instrumenting data prior to 
display comprises replacing a reference to a top frame or EM frame with a reference to 
a top of theDSDA. 

8. The method of claim 7, wherein said step of replacing comprises, 

in HTML, determining if a value of a Target attribute is 'Mop", and changing the 
value to represent a topmost area of the DSD A. 
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9. The method of claim 7, wherein said step of replacing comprises, 

in Java, determining if a value of a Target attribute is "_top", and changing the 
value to represent a topmost area of the DSDA. 

10. The method of claim 7, wherein said step of replacing comprises, in 
JavaScript, replacing the reference to "top" with a reference to a topmost area of the 
DSDA. 

11. The method of claim 6, wherein for predefined JavaScript, HTML and 
other code, the step of instrumenting is performed on a server side of the HM, and 
wherein for dynamically generated code, the step of instrumenting is performed on a 
client side of the HM. 

12. The method of claim 1, wherein the step of altering data prior to display 
comprises replacing the DS data references to a reference through the HM. 

13. The method of claim 12, wherein only selected references are routed 
through the HM. 

14. The method of claim 12, wherein said step of replacing comprises altering 
a language of the reference such that any parameter which when set causes a document 
to be fetched from the destination server causes the document to be fetched through the 
HM. 

15. The method of claim 1, wherein links and references invoked by a user's 
selection are altered when the user selects the reference. 

16. A method of accessing data through an independent intermediary 
mechanism (HM), the method comprising: 

retrieving destination server data (DS data) for display from a destination server; 
instrumenting the DS data such that future data retrieved from the destination 
server is retrieved through the HM. 

17. A method of accessing data through an independent intermediary 
mechanism (HM), the method comprising: 

retrieving destination server data (DS data) for display from a destination server; 
altering a request for a cookie from the destination server or the DS data, such 
that the cookie relevant to the destination server is accessed from the HM; and 
storing and updating the cookie in the HM cookie database. 
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18. An independent intermediary mechanism (DM) comprising: 

a core engine retrieving destination server data (DS data) for display from a 
destination server; 

a user interface framework for maintaining a frame including the IIM user 
interface on a client browser as the client browser accesses different destination servers; 

19. The IIM of claim 18, further comprising: 
a cookie database; 

a cookie modification engine that alters a request for a cookie from the 
destination server or the DS data, such that the cookie relevant to the destination server 
is accessed from the IIM cookie database; and 

the cookie modification engine further for maintaining and updating the cookie. 

20. The IIM of claim 18, further comprising: 

a data modification engine for instrumenting the DS data such that future data 
retrieved from the destination server is retrieved through the IIM. 

21 . A communications mechanism comprising: 

a first independent intermediary mechanism (EM) displaying a frame including 
a user interface of the EM, the frame framing a destination server display area (DSDA); 

the first IIM retrieving destination server data (DS data) for display from a 
destination server and instrumenting the DS data prior to, the first IIM further for 
providing services to the user. 
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USER CONNECTS TO IIM 
THROUGH CLIENT BROWSER 
610 




I 



USER CONNECTS TO DESTI NATI ON SERVER (DS) 
THROUGH IIM AND IIM RECORDS INSTRUMENTED 
DS ADDRESS IN HI STORY DATABASE gl5 



CHANGE REFERENCES TO GO THROUGH IIM TO 
LOAD IN DSDA, MAINTAINING IIM FRAME 

620 




RECORD USER'S 
•4 COMMUNICATION WITH DS 
IN USER'S TRANSACTION DB 
630 



IIM FORWARDS COMMUNICATION 
TO DS INCLUDING RELEVANT 

COOKIES ©5 




RECORD DS RESPONSE IN 
USER'S TRANSACTION DB 
645 



YES 
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IIM INSTRUMENTS DS'S RESPONSE, 
STORES COOKIES RETURNED BY DS, 
FORWARDS TO CLIENT BROWSER 
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DOCUMENT WITH 
FORMS IS DISPLAYED 
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I 



USER REQUESTS FORM-FILL 
FUNCTION THROUGH 1 1 M Ul 
1015 




IDENTIFY FORM 
HELD NAMES 

1035 



RLLINCHANGED 

INFORMATION FROM 

PROFILE 
1045 



FILL IN REM AINJNG INFORMATION 
AS IN TRANSACTION DB 

1050 
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USER, AND ALLOW USER TO EOT 
FORM 1055 
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— PRIVILEGED USER^\ 
( CONNECTS TDIIM J 
V 1110 

__ZE_ , 

PRIVILEGED USER ACCESSES 
PAGE WITH FORMS ON DESTINATION 
SERVER THROUGH II M ,^ 



IIM DISPLAYS USER INTERFACE 
FOR CATALOGUING 

PC™ 1130 

PRIVILEGED USER MAPS EACH 

FORM ELEMENT TO AN 
ELEMENTIN USER PROFILE 
OBJECT 1140 



PRIVILEGED USER ADDS OTHER 
INFORMATION ABOUT FORM 

1150 
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PRIVILEGED USER SUBMITS 
INFORMATION TO IIM 

1160 
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IIM UPDATES FORM 
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DESCRIPTION IN FORM DB 
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USER ACCESSES ADS 
THROUGH ACCOUNT LOGIN PAGE 

1220 
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USER REQUESTS TO ADD 
ACCOUNT TO ACCOUNT 
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COMPLETE LOGIN 
PROCESS 1240 



ADD ACCOUNT ENTRY I NTO USER'S 
ACCOUNT DATABASE, RECORD 
ACCOUNT LOGIN INFORMATION 
AND DATE OF ACCOUNT ENTRY 
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USER CONNECTS 
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IIM SENDS LOGIN INFO TO 
APPROPRIATE DS TO LOG IN 
USER 1280 



IIM INSTRUMENTS DS 
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DISPLAY 1 285 
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THROUGH INTERMEDIARY 
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ON TRANSACTION 
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USER REQUESTS ACCESS TO 
BOOKMARKS THROUGH Ul 
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USER CONNECTS 
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HISTORY THROUGH Ul 
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^ehref^anyURLV 



href=http:/4ww^ 
cument.htmr> 

basehrrf="anyURL"> 



wwwDS.oom is the hostname 
oftheDS. The IIM inserts the 
first <base> tag line after the 
<H7ML> tag and before the 
<H&AD>tag, and before any 
exsiting <base>tags 



<form acOon= M /krtorl!RL"> 



SaveOrigAction( form 
actionURL) 

<formaction=" 

http://WAwJIMoorrvf*edrrect ? ^ 

4itlp:/>(wAv.DS.com 

£ctionl)RL"> 



wwwllM.com is the hostname 
of the IIM and wwwDS.com is 
the hostname of the DS. 
SaveOrigtetionO is a 
Javascript function that saves 
the form's orignal action. 



<applet codeb9se="/fcxxiebase rt 
code= w appletdass"> 



htlp://towwJ IM .corrvf ecSrectfcb 

m 

http:///ww*DS.ccmto^ 
cocte= u appletdass"> 



wwwillM.com is the hostname 
of the IIM and www.DS.com is 
the hostname of the DS 



<frame sro= < /hryFrameLhtrril' , > 

other tags eg, <script> ( 
<area>, <Jayer>, <img> 



linkhref = a newlJOcaticn ,, 



<frame 

src=="http://(vwwllM.oonifeclre 
ct?sn>*ktp/>VwwaDS.oom^^ 
ramahtmlV 



sedJRLPrapertydink, "href, 
"newijocation" ) 



wwwilM.com isd the hostname 
of the IIM and wwwDS.com is 
the hostname of the DS. 



seURLPropertyO sets the 
value of the property href to the 
value 

"http/4/wwill M.oomtecfirectfir 
l4itlp://Vww.DS.oom^ewljocat 
ion", where wwwIIM.oom is the 
hostname of thellM and 
wwwDS.oom is the hostname 
oftheDS. 



linkondick ^originalOhQick 



function 

addslewLinkOndick(link){ 
linkondickOrig = 

linkondidc 
linkonclick; 
linkonclick ■ 

newUnkOndick; \ 

function noMjnkOndick(link){ 
if ( linkoriginalHref = null ) 
liricorignalHref = linkhrd; 
varne^lref = 
getfUIParthName( 
linkoriginalHref); 

linkhref = 

htlp:/AvwwllM.oomtedn9ct ? Ld 
=newHref; 

return linkondickOrigQ; } 



getfullPathNameO re&iins the 
full pathname URL of the 
HTML and wwwl IM.com is the 
hostname of the IIM. The 
function addNavLinkQidickO 
is called when the HTML 
document is first loaded 
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Original Code 


AteredCode 


Comments 


docummtvvritE^^ 


writEDocument ( document; 
StringToWritE ); 


writeDocumentO recursively 
modifies all HTTP control 
points that occur in 
StringToWritE 


window.open( newLocation ); 


open Window ( window, 
newLocation ); 


openWindow calls 
windows.openO with the 
argument 

B h^/^ww\AlS.oorrvfecired?ur1 
4itlp://www.DS.convh^ 


formonsubrrit= 
original OnSubnit 


function 

adc^lewf : b^70^subrri^ 
formonsubrriOrig = 

fbrmcnsubrrit; 
fbnnonsubnit = 

newForrnOnsubnit; } 

function 

newfbrm0nsubrrit( form ) { 
if (form original A3] on = null) 

(finnriohninalArlinn = 

fbrmaction; } 

varnew/VAon = 
gefullPathName(fonTL original 
Action); 

fbrmaction = 

http://^JIM.cxmfecfirect ? uri 
=newAaion; 

return fbrmonsubrritDrigO; } 


getFuliPathNameO returns the 
full pathname URL of the 
HTML document and 
www.IIM.com is the hostname 
ofthellM. The function 
addNewFornrOnsubrritO is 
called when the HTML 
document is first loaded 








ciass.java.net Socket 


Extends java.net Socket and 
overrides various constructors. 


The extended method modifies 
the host and port arguments. 
The modified host argiffnent is 
the hostname ofthellM. the 
mod fied port argument is the 
port ofthellM 


javaapplet/^etContExt 


Extends 

java.appleL^ppl€CbntExt and 
overrides various constructors 


The extended method modifies 
the url argument The modified 
url sends the HTTP request to 
the IIM with the full pathname 
of the original url as a query 
parameter 


class java.appleLApplet 


Extends javaappleLAppletand 
overrides various constructors 


The extended method modi fies 
the url argument Themodified 
url sends the HTTP request to 
the f IM with the full pathname 
of the original url as query 
parameter 
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Original Code ( 


Altered Code 1 Comments 


|hi ik Headers 






refers; 

eg. value = origDochtm 


referer, 


referer value is replaced with 
the ftJi pathname of the 
doamrienfs original URL 


content-type; 
value = null 


content-hype; 

eg. value =image&f 


1 f the vai ue of the content-type is 
null, the 1 1 M sets this header to 
a value that describes the type 
of content contained in the 
document 


■f. i, 

rerresn, 

3XXX ori^chtm 


SOOQt 

http//wvwlS.a>rTv^ 
hOjx//WwAiDS.cxxTvbrig 


IIM replaces the URL portion of 
the value of the refresh header 
with the full pathname of the 
documents criqnal URL 


301, 302 status codes, 

eg, URI value « 

h^/><A^DS.<xxTvbrigDoc 

html 


301, 302 status codes, 
URI value- 

htpp//W^IS.conrvfecirect?uri= 
htip: www.DS.corrvferi^)oc html 


wwwIIM.oom is the hostname 
of the IIM 


201, 303,305, 307 status 
codes 

URI values 


201, 3001305, 307 status 
codes 

modfiedURI values 


See 301, 302 status codes 
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target ="Jtop" 



or <a href>, <frame>, <fbrm> 
and <base> tags 



target = "DSFrameNarTB" 



where DSFirameName is the 
name of theDSDAtop frame. 



target^'.parenf 

br<3 href>, <frame>, <forrn> 
and <bas^ tags 

Javasaip 
topJocationProperty = value 



target = u DSFrameName w 



setTopProperty( 
cunrentWindov* 
locationProperty, value) 



where D5FrameName is the 
name of theDSDAtop frame; if 
the current window equates 
totheDSDAtopfrarre 



setTopProperty sets a location 
property on the DSDAtop 



frame with name 
locationProperty to have value 
value 



window.parent 
looationProperty = value 



setTopProperty ( 
windowparent; 
locationProperty, value) 



setTopPorperty sets a location 
property on the DSDAtop 
frame with name 
locationProperty to have value 
value if window parent 
evaluates to the top or IIM 
frame 




javaappletAppletCdntectshow 
Document uri, target) 



newShowDocument ( window; 
uri, target) 

javaapplet^etfxntEDCtshcw 
Document uri, new"6rget) 

» 



new5howDocument calls 
javaapplet^etContEXtshow 
Document where newTarget is 
the name of the DSDA frame if 
target equals a _top" or if target 
equals ".parent' and window is 
the DSDA frame; "newTargef 
is setto "targef otherwise 
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String = doamentcookie 



string = ge£ockie( wndcw; 
document) 



geCbokieO gels the cooWefs 
value from the IIM and assigns 
the value to string 



document cookie = 
cookieString 



Java 

avaxservlethttp-Cookie 



set0ockie( window document; 
oookieString) 



setCookieO sends the value of 
oooWeStringtDthellM to be 
managed 




cookie 



IIM sends this header to the DS 
on aneed basis 




xjUic class ISCooWe 
implements SerializaHe { 

xivate longjcreationTtme; 

public boolean hasExpiredOi 
//ecpi ration taction code } 



maintains the cookie's creation 
time and contains convenience 
routines thatdetemineifthe 
cookie has expired 



Cookies 



public dass Cookies extends 
PersistantDbject implements 
Serializablef 

public String getCookie (URL 
urOft 

public statis Cookie 
parseCdokie(Stringstr) ft 

public void 

addCookieflSCookiecoo, URL 
uri)ft 

pnvate boolean 

validCookie(!SCookiecoo, URL 
urOII 



ectends the Java persistent 
object dass, and saves in a 
user database the user-sped fic 
cookie information that the DS 
sent in the set-oookie header 
This dass also finds the 
oookies in the cookie database 
that are valid for a certain URI 
based on well known Cookie 
rules and returns a Cookie 
string for a gven URI. 
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Original Code 


^teredCode 


Conrments 






windowlocation = newLocation 


sedjocation(cuiTentV\/indo^ 
window new/Location) 


seiLocationO sets the 
windowlocation to the value 
1itlpy/^ww^llM.cx)m^edrect?ur1 
4Tti^/ytowwDS.ayTVh^ 
vtfiere vwwvJIM.com is the 
hostname of the IIM and 
wwtDS.com is the hostname 
oftheDS. 


saveLocation = 
window location 


saveLocation = 

getlccatiai(ajnHTtVWndov^ 

window) 


where getLocati on returns 
windowlocation except when 
window is equal to the top 
frame; then it returns the DSDA top 
top frame's location 


top userProperty = value 


setTopProperty ( 
aPTentWindcw^ userProperty 
value) 


where setTopProperty sets a 
use property on the DSDA top 
frame wth name userProperty 
to have value value 


wirKtowparentuserProperty = 
value 


setTopProperty ( 

window parent, userProperty 

value) 


where setTopProperty sets a 
user property on the DSDA top 
frame with name userProperty 
to have value value if 
windcwparent evaluates to the 
top frame 
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PERSONALIZED ACCESS TO WEB SITES 
Background of the Invention 

5 L Field of the Invention 

This invention relates to web access; to summarization and aggregation of 
personalized information, such as used in conjunction with an internetworking environment; 
and to structured data input and automatic form processing, such as used with the world wide 
10 web (including wireless uses). 

2. Related Art 

I. 

15 One aspect of the internet which has become popular is access to the world 

wide web, in particular, access by web client devices or software to information provided by 
web servers (also known as "web sites"). Some of these web sites provide information or 
services only to a set of users (operators of web clients) to which access is restricted, or 
provide information that is personalized to registered users. For a first example, users may be 

20 required to register, to identify themselves at connection to the web site, and to authenticate 
themselves to the satisfaction of the web site, before the web site grants that user access to 
certain information or services. For a second example, users may be required to identify and 
authenticate themselves before the web site provides information personalized to that user, 
such as information likely to be of particular interest to that user. For a third example, some 

25 web sites allow unrestricted access to a first set of public information, and only restricted 
access to a second set of restricted information. 

As the number of such web sites becomes relatively larger, a first problem in 
the known art is management of information relating to those web sites, including access 
30 parameters and authentication information (such as passwords). For example, the user might 
be required to maintain (either offline or online) information regarding each such web site, 
including authentication information (such as a user name and password, a digital certificate, 
or a hardware address) that may differ for different web sites. 

1 
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Some attempts have been made in the known art to address this problem, such 
as software that maintains records of authentication information for different web sites, or by 
maintaining the information in "cookies" (data objects) recorded at the web client. These 
known methods are subject to several drawbacks. First, it is difficult to use the same web site 
from different physical web client device, and is also difficult to distinguish among different 
users of a single web site all using the same physical web client device. Second, the use of 
"cookies" or other data objects recorded at the web client device (such as a laptop or 
workstation) implies that any user who has physical control of the device will have access to 
the web sites. 

Accordingly, it would be advantageous to provide a technique in which a user 
can maintain authentication information (such as a user name and password) for multiple 
different web sites, and be able to access those different web sites using a single set of 
authentication information. 

A second problem in the known art is that it is inconvenient to re-enter or 
update the information for multiple web sites, particularly when the number of web sites 
becomes relatively large. Some attempts have been made in the known art to address this 
problem, such as software that maintains records of authentication or demographic 
information and attempts to interact automatically with the web site requesting the 
information. These known methods are subject to the drawback that different web sites can 
and often do request similar information in quite different formats. Moreover, it would be 
advantageous for a single user to be able to select from multiple profiles for use with different 
web sites, so as to personalize the information obtained from that web site, or so as to 
discourage dissemination of personal information. 

A third problem in the known art is that a first user may desire to allow a 
second user temporary access to the first user's registered account at a selected web site. 
Using known techniques for authentication, such as a user name and password, the first user 
cannot assure any limitations on the second user's temporary access. Most servers would 
even allow the second user to change the associated password, and thus deny future access to 
the first user. An aspect of this problem is that the first user might desire to grant only 
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restricted access rights to the second user, so as to restrict the second user from performing 
banking or commercial transactions using the first user's account. 



A fourth problem in the known art is that each such web site will often request 
5 an email address from the user, so as to send advertisements and possibly other "junk" email 
to the user. This can become a nuisance when the user is registered with multiple web sites. 
It would be advantageous if the user could separate out email from web sites, so as to be able 
to control email from those web sites. For example, the user could desire to treat differently 
email that is not sent automatically (and thus is more likely to be of real interest to the user). 

10 

Accordingly, it would be desirable to provide an improved technique for 
access to personalized web sites. A first aspect of the invention is that a user can maintain 
and select from a set of multiple profiles for use with a selected web site. This can aid the 
user in presenting only desired information to the selected web site. A second aspect of the 

15 invention is that a user can maintain a single set of authentication information for access to 
multiple restricted web sites, along with bookmark information for the web site, for access 
from additional locations. A third aspect of the invention is that a first user can allow a 
second user (or a set of such second users) temporary access to a set of web sites, possibly 
with the temporary access restricted to a subset of the information or services offered by those 

20 web sites. A fourth aspect of the invention is that the user can separate out and treat 

differently email from those web sites. This can aid the user in filtering out unwanted email. 

II. 

One aspect of the internet which has become popular is access to the world 
25 wide web, in particular, access by web client devices or software to information provided by 
web servers (also known as "web sites"). Individual users, using web client software, request 
information from web sites and receive information in response to those requests. Each web 
site can include information in a variety of forms, including text, other media, and links, 
which are delivered for presentation to the user. The user can follow the links to other and 
30 further web sites, in a process sometimes called web "surfing." 



One problem in the known art is that individual users perform web surfing 
without reference to other individual users. Although it is possible for multiple users to 

3 
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access the same web site at once, there is no convenient and simple technique in the known 
art for those users to coordinate following links to other and further web sites. Similarly, 
there is no convenient and simple technique in the known art for providing, for a group of 
related users, simultaneous access to a sequence of web sites. 

Accordingly, it would be desirable to provide an improved technique for group 
access to web sites. This is achieved in an embodiment of the invention in which multiple 
related users can simultaneously access a sequence of web sites (web surfing), such that each 
of the related users has substantially the same content presented at the same times. In a first 
embodiment, a selected one of the related users controls the web surfing process. In a second 
embodiment, a selected plurality of the users collectively control the web surfing process. 

III. 

One aspect of the Internet which has become popular is access to World Wide 
15 Web, in particular, access by web client devices or software to information provided by web 
servers (also known as "web sites"). Individual users, using web client software, request 
information from web sites and receive information in response to those requests. Each web 
site can include information in a variety of forms, including text, other media, and links, 
which are delivered for presentation to the user. The user can follow the links to other and 
20 further web sites, in a process sometimes called web "surfing." 

One problem in the known art is that individual users develop a substantial 
amount of personalized information, stored at different web sites in different formats, and 
with differing methods of access. Although it is possible for an individual user to retrieve and 
25 aggregate that individual's personalized information from a plurality of web sites, there is no 
convenient and simple technique in the known art to do so. Rather, it typically takes 
significant time navigating differing data formats and methods of access imposed by different 
web sites. 



5 



10 



30 Accordingly, it would be desirable to provide an improved technique for 

summarization and aggregation of personalized information. This is achieved in an 
embodiment of the invention in which a personal data server obtains personalized information 
for individual users, on their behalf, from one or more web sites having that information, and 

4 



10 



20 



25 



WO 00/481 10 PCT/US00/03790 
presents that personalized information to those individual users in a convenient format. The 
convenient format can include a technique for presentation that allows aggregation, 
modification, or summarization. 

The invention provides an enabling technology for summarization and 
aggregation of personalized information, to obtain substantial advantages and capabilities that 
are novel and non-obvious in view of the known art. Examples described below relate to 
information for electronic commerce ("e-commerce"), but the invention is broadly applicable 
to many different types of personalized information or transactions. 



IV. 

One aspect of the Internet that has become popular is access to the world wide 
web, in particular access by web client devices or software (also known as "web browsers") to 
information provided by web servers (also known as "web sites"). Some of these web sites 
15 provide structured forms for data input, such as HTML or XML forms, table entry of data, 
and other techniques. These structured forms for data input can be used for a variety of data- 
capture purposes. Some examples could include registration of a new user, adding a product 
to a "shopping cart" or other electronic commerce technique, and purchasing a product (or 
purchasing a set of products already identified using a shopping cart). 



One problem in the known art is that entering data for such forms is repetitive 
and relatively uninteresting for the human user. This takes unnecessary time away from other 
activities the user could be performing. It can present a barrier to web site usage, and can also 
present a barrier to effective sales and rapid order fulfillment. 

Another problem in the known art is that it is not practical to complete manual 
data entry for such activities when the user is accessing the internet through a small-screen 
device or a bandwidth constrained network, such as in wireless internet access. 



30 One known method is to record information for such forms logically local to 

the user's web client, such as on the user's computer in the form of a "cookie" or other 
structured data. While this method generally achieves the objective of allowing the user to 
repeatedly use a web site without having to re-enter the same information, it is subject to 

5 
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several drawbacks. First, it is generally inapplicable when the user is presented with a request 
for data input from a new web site, as that new web site does not retrieve the relevant 
information from the cookie. Second, it is generally inappliable when a user is accessing the 
web site from more than one client device. Third, the relatively weak security associated with 
cookies militates against storing confidential information, such as credit card information. 

A second known method is the "One Click shopping" method available at the 
web site "amazon.com," in which allows automation of transactions for all users at the 
specific web site. While this method generally achieves the objective of allowing the user to 
repeatedly use a web site without having to re-enter the same information, it is subject to the 
drawback that it works only with those specific web sites that have directly linked their server 
software with the One Click shopping server software and database. 

Accordingly, it would be advantageous to provide a technique for 
automatically completing such forms, without having to obtain input from a human user 
regarding what information properly belongs in which fields of the form, that is not subject to 
drawbacks of the known art. 

Summary of the Invention 
I. 

The invention provides a method and system for access to personalized web 
sites. In a first aspect of the invention, a user can maintain and select from a set of multiple 
profiles for use with a selected web site. In a second aspect of the invention, a user can 
maintain a single set of authentication information for access to multiple restricted web sites, 
along with bookmark information for the web site, for access from additional locations. In a 
preferred embodiment, the user can use the single set of authentication information to manage 
multiple restricted web sites, including monitoring usage of cost-based services and being 
able to control or provide automated renewal of such services. In a third aspect of the 
invention, a first user can allow a second user (or a set of such second users) temporary access 
to a set of web sites, possibly with the temporary access restricted to a subset of the 
information or services offered by those web sites. In a fourth aspect of the invention, the 
user can separate out and treat differently email from those web sites. 
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II. 

The invention provides an improved technique for group access to web sites. 
Multiple related users can simultaneously access a sequence of web sites, such that each of 
5 the related users has substantially the same content presented at the same times. In a first 
embodiment, a selected one of the related users controls the web surfing process. In a second 
embodiment, a selected plurality of the users collectively control the web surfing process. In 
a first aspect of the invention, the group surfing process can be used in conjunction with a 
communication technique between and among groups of users involved in the web surfing 

10 process, such as telephone communication, voice over IP, or Internet chat. In a second aspect 
of the invention, the group surfing process can be used in conjunction with other network 
functions, such as electronic commerce, on-line or otherwise remote training, virtual displays 
or tours, telemedicine or other process telecontrol, or consulting (such as in the fields of 
finance, advertising or marketing). More generally, the group surfing process can be used in 

15 conjunction with functions that could otherwise occur on display before an in-person 
audience. 

III. 

The invention provides an improved technique for summarization and 
20 aggregation of personalized information. A personal data server obtains personalized 
information for individual users, on their behalf, from one or more web sites having that 
information, and presents that personalized information to those individual users in a 
convenient format. The convenient format can include a technique for presentation that 
allows aggregation, modification, or summarization. 

25 

In a first aspect of the invention, the personal data server maintains information 
for a set of individual users so as to be able to retrieve, on their behalf, personalized 
information from one or more web sites having that information. The personal data server 
presents that personalized information in a dynamically generated "jump page" that the 
30 individual user can peruse and use to navigate directly to one or more web sites having that 
information at hand. The personal data server also aggregates or summarizes that information 
so that the individual user can view a more global presentation without having to individually 
navigate to each web site having personalized information about or selected by that individual 
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user. The aspect has broad applicability to e-commerce and electronic banking, to inter-user 
communication, and to inter-user interest groups. 



In a second aspect of the invention, the personal data server can be used to 
provide only limited or only aggregate access to personalized information to persons or 
entities other than the individual for which the information is personal. The personal data 
server can collect information approved for collection by a set of individual users, aggregate 
or summarize that information, and present only the aggregate or summary to a reviewing 
person or entity. This aspect has broad applicability to census and polling data, market 
surveys and other data collection, and to inter-user communication. 

IV. 

The invention provides a method and system for automated and intelligent 
structured data input. A user operating a web browser to access a web site is assisted by 
personalization software that identifies forms for structured data input and assists the user 
with data input. In a preferred embodiment, operations described herein can be performed 
automatically on the personalization server (or other server) on behalf of the user. 

In a first aspect of the invention, the personalization software, when possible, 
associates each set of descriptive text with a logical field value, when possible associates 
screen locations for each relevant input field with a logical field value, and when possible 
associates logical field values with multiple data values or partial data values. Having 
associated logical field values for each relevant input field, the personalization software 
provides data input for those fields without substantial requirement for user data input, and 
when operating on the server, is capable of returning the appropriate data to the third party 
web site. In a preferred embodiment, the data input for those fields can include pre-recorded 
personal information about the user, such as pre-recorded data for the user's name, address, 
telephone number, credit card information, demographic information, and preferred login 
name or password. This first aspect of the invention has applicable uses including automatic 
registration of a user at a new web site, automatic login using the login page of a web site, and 
form filling for checking out purchases from multiple web sites. 
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In a second aspect of the invention, the personalization software uses a u meta- 
bookmark," which links an identifier of a web page (such as a URL) and an association of that 
web site location with a script or program fragment to be executed for that web page to send 
appropriate information to the personalization server. The meta-bookmark thus allows the 
5 personalization software to either (a) complete the transaction on that server, or (b) send back 
the appropriate information to the client so the transaction can be completed on the client 
while keeping most confidential and other data on the personalization server. The 
personalization software is thus able to perform a plurality of actions with regard to the web 
page (and with regard to successor web pages), including entering data into forms, checking 
10 that data against a confirmation page, and confirming that the data received by the web site is 
correct. This second aspect of the invention has applicable uses including automatic 
performance of an e-commerce operation, such as supplying credit card information and 
confirming an e-commerce transaction. 

15 In a third aspect of the invention, a helper application assists the 

personalization software in recognizing differing types of structured data forms and and is 
directed by the personalization software for entering data for those differing types of 
structured data forms. For example, the helper application can determine differences between 
a web page for new-user registration, a web page for user login, and a web page for 

20 confirming an e-commerce transaction, and can complete these pages directly without 
substantial assistance from the user, using information from the personalization software. 

In a fourth aspect of the invention, the personalization software performs 
automated new-user registration for the user of the web client at a plurality of web sites. 
25 Personalization information is collected for the user and sent to each web site in the individual 
format that web site requests. If one or more web sites request further personalization 
information not already entered by the user, the personalization software can request that 
further personalization information at once, so as to send it to those one or more web sites. 

30 In a fifth aspect of the invention, the personalization server automates the 

checkout process for purchases on many different Web sites, automatically processing the 
multiple web pages required by each shopping store independently, and successively 
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completing each of them with the purchasing agent and using the relevant user information it 
has on hand. 



The invention provides an enabling technology for a wide variety of 
5 applications for structured data input, and for automated or intelligent access to logically 
remote information requesters. Examples described below relate to personalized web sites 
and to e-commerce, but the invention is broadly applicable to many different types of 
information exchange, including many different types of information transactions and 
interactions between and among communicating computers and to computer software. 

10 

Brief Description of the Drawings 
I. 

Figure 1 shows a block diagram of a system for access to personalized web 

15 sites. 

Figure 2 shows a process flow diagram for a method of using a system for 
access to personalized web sites. 

20 II. 

Figure 3 shows a block diagram of a system for group access to web sites. 

Figure 4 shows a process flow diagram for a method of using a system for 
group access to web sites. 

25 

III. 

Figure 5 shows a block diagram of a system for summarization and 
aggregation of personalized information. 

30 Figures 6 and 7 collectively show a process flow diagram for a method of 

using a system for summarization and aggregation of personalized information. 



IV. 
10 
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Figure 8 shows a block diagram of a system for automated and intelligent 
structured data input. 



Figure 9 shows a data flow diagram of the system for automated and intelligent 
5 structured data input. 

Figure 10 shows a process flow diagram of a first method for operating a 
system for automated and intelligent structured data input. 

10 Figure 1 1 shows a process flow diagram of a second method for operating a 

system for automated and intelligent structured data input. 

Figure 12 shows a process flow diagram of a third method for operating a 
system for automated and intelligent structured data input. 

15 

Figure 13 shows a process flow diagram of a fourth method for operating a 
system for automated and intelligent structured data input. 

Figure 14 shows a process flow diagram of a fifth method for operating a 
20 system for automated and intelligent structured data input. 

Detailed Description of the Preferred Embodiment 

In the following description, a preferred embodiment of the invention is 
25 described with regard to preferred process steps and data structures. Those skilled in the art 
would recognize after perusal of this application that embodiments of the invention can be 
implemented using one or more general purpose processors or special purpose processors or 
other circuits adapted to particular process steps and data structures described herein, and that 
implementation of the process steps and data structures described herein would not require 
30 undue experimentation or further invention. 



System Elements 



I. 
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Figure 1 shows a block diagram of a system for access to personalized web 

sites. 

5 A system 100 includes at least one web client 1 10, a communication network 

120, at least one web site 130, and a personalization server 140. 

As used herein, the terms "client" and "server" refer to client-server 
relationships between client and server, not necessarily to particular physical devices. 

10 

As used herein, the phrase "web client" includes any combination of devices or 
software taking on the role of a client in a client-server environment in the internet, the world 
wide web, or an equivalent or extension thereof. There is no particular requirement that the 
web clients 110 must be individual devices; they can each be a single device, a set of 
15 cooperating devices, a portion of a device, or some combination thereof (such as for example 
a device providing web server services that acts as an agent of the user). 

As used herein, the phrase "web site" includes any combination of devices or 
software taking on the role of a server in a client-server environment in the internet, the world 
20 wide web, or an equivalent or extension thereof. There is no particular requirement that the 
web sites 130 must be individual devices; they can each be a single device, a set of 
cooperating devices, a portion of a device, or some combination thereof. 

The web client 1 10 includes a processor operating under control of web client 
25 software 111, such as a web browser, and disposed for use by an operator or user 112. In a 
preferred embodiment, the web client software 1 1 1 includes software 113 disposed for 
communicating with the web sites 130 using a communication protocol, possibly including 
data 1 14 stored locally at the web client 1 1 0 regarding those web sites 1 30. 

30 In a preferred embodiment, the web client 1 10 includes a general-purpose 

computer, such as a laptop or workstation. However, the web client 110 can also include 
(either alone or in conjunction with a laptop or workstation), a hand-held calendar (such as a 
"Palm Pilot" or other hand-held device), a portable computer, a special purpose computer, a 

12 
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cellular telephone or other telephonic device, a telephone system with interactive voice 
response, or a web server acting as the agent for an user. In alternative embodiments* the web 
client 1 10 may also include any other device disposed for performing the all or some 
functions described herein. The location, the type of device, and the nature of the connection 
5 of the web client 1 10 to the web site 130 can each differ between pairs of connection sessions 
between the web client 110 and the web site 130. 

In a preferred embodiment, the communication network 120 includes a packet 
switched network such as the Internet, as well as (in conjunction with or instead of) an 
10 intranet, an enterprise network, an extranet, a virtual private network, a virtual switched 

network. In alternative embodiments, the communication network 120 may include any other 
set of communication links that couple the web client 1 10, web site 1 30, and personalization 
server 140 so they can perform the functions described herein. 

15 The communication network 120 is disposed for transporting messages 1 5 1 

between any two of the web client 1 10, the web site 130, and the personalization server 140. 
The messages 151 are formatted in the communication protocol recognized by the web client 
1 10, the web site 130, and the personalization server 140. In a preferred embodiment, the 
communication protocol includes HTTP (hypertext transfer protocol) or a variant thereof, 

20 such as SHTTP (secure HTTP). The communication protocol can also include other protocols 
for requesting and sending information, including FTP (file transfer protocol), Gopher, and 
variants thereof. Although the description refers herein primarily to HTTP, those of ordinary 
skill in the art will recognize, after perusing this application, that use of the invention with 
other protocols would not require new invention or undue experimentation. 

25 

In a preferred embodiment, those messages 151 that request information can 
include an identifier 152 for a requested page 153. The page 153 includes a set of 
information, possibly including data in one of a number of formats, and possibly also includes 
a number of links 1 54 to other pages 153. Each link 1 54 includes an identifier 1 52 for its 
30 target page 1 53, and information about the target page 1 53 (such as a title). 



In a preferred embodiment in which the communication protocol includes 
HTTP or a variant thereof, each page 1 53 can include data in the form of text, images (still or 
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animated), sound, program fragments (such as applets, applications, or JavaScript), or 
combinations thereof. 



In a preferred embodiment, the web site 130 includes a processor operating 
5 under control of web server software 131, and disposed for delivering information 132 to the 
web client 1 10 in response to requests made using the communication protocol. In a preferred 
embodiment, the web site 130 includes software 133 disposed for communicating with the 
web client 110 using the communication protocol, and includes authentication or 
personalization data 1 14 (or techniques) stored locally at the web server 130 regarding those 
10 web clients 110. 

In a preferred embodiment, the personalization server 140 includes a processor 
operating under control of personalization software 141, disposed for performing the 
functions described herein, including maintaining information 142 about relationships 

1 5 between the web client 1 1 0 (or a user thereof) and the web site 130. In a preferred 
embodiment, the personalization software 141 includes software 143 disposed for 
communicating with the web clients 1 10 and the web sites 130 using the communication 
protocol, and includes an authentication and personalization database 144 stored locally at (or 
otherwise accessible by) the personalization software 141, regarding those web clients 1 10 

20 and web sites 130. 

Interactions between System Elements 

The web client software 1 1 1 is disposed for sending a message 15 1 to the 
25 personalization server 140, to request the personalization server 140 to respond and perform 
functions described herein. In a preferred embodiment, the message 1 5 1 is responsive to an 
action by the user of the web client software 111, such as by selecting a web page or a link to 
a web page. 

30 The personalization software 141 is disposed for receiving the first message 

151 from the web client software 111. The personalization software 141 uses information in 
the first message 1 5 1 from the web client software 1 1 1 to navigate to the selected web site 
and to identify and authenticate the user at the selected web site. The personalization 
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can perform these functions in one or more, or a combination of, the following 

o The personalization software 141 can send a second message 151 to the web site 130, 
5 to request the web site 130 to respond and perform functions described herein. 

When using this first method, the personalization software 141 communicates directly 
with the web site 130, so as to identify and authenticate the user. 

10 When using this first method, the web server software 131 is disposed for receiving 

the second message 151 from the personalization software 141, and for responding 
thereto. After proper identification and authentication, the web server 131 sends 
further messages 151 directly to the web client 1 10 using the network! 20. 

15 o The personalization software 141 can send additional information (such as parameters 
in an HTTP message 1 5 1) to direct the web client software 1 1 1 to perform functions 
as described herein. 

When using this second method, web client software 1 1 1 (using the additional 
20 information) directly requests appropriate information (such as a login or registration 

form) from the web site, and to respond with appropriate information to identify and 
authenticate the user (such as to respond with a completed registration form). 

When using this second method, the personalization software 141 preferably supplies 
25 the additional information for the web client software 1 1 1 in an encrypted or otherwise 

encoded form, so that the user of the web client software 1 1 1 does not obtain 
identification and authentication information directly. Encryption also provides 
additional security while sending messages 151 across the network 120. 

30 The functions for the web site 1 30 are not substantially different from those 

performed by the web site 130 in response to similar requests from others, including possibly 
the web client software 111. Accordingly, there is no particular requirement that the web 
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server 130 be modified to operate in conjunction with the web client software 1 1 1 and the 
personalization server 140 to perform the functions described herein. 



After registration is accomplished, the web server software 131 can respond 
5 either directly to the personalization server 140 (with a third message 1 5 1) or directly to the 
web client 110 (with a fourth message 151), as directed by the personalization software 141. 

Registering the User with the Personalization Server 

10 The personalization server 140 is disposed to maintain authentication and 

personalization information about the user at the web client 1 1 0, to record that information in 
its database 144, and to communicate (directly or indirectly) with the web site 130 regarding 
that information. 

15 When the user at the web client 1 1 0 wishes to register with the personalization 

server 140, the web client software 1 1 1 sends a message 151 to the personalization server 140 
requesting a registration page 153. The personalization server 140 sends the registration page 
1 53 to the web client software 111, which presents the registration page 1 53 to the user. 

20 The registration page 153 includes a form, applet, or other structure for 

gathering information from the user. In this way, the personalization server 140 requests 
authentication and personalization information about the user. Upon receiving that 
information, the personalization server 140 records it in its database 144. Although the 
personalization server 140 records information about the user at first registration of that user 

25 with the personalization server 140, the user can at other and further times add or modify that 
information, or add or modify profiles for use with web sites 130, independent of actual use of 
any selected web site 130. 

In a preferred embodiment, the authentication and personalization information 
30 about the user includes a username and a password. Methods of username and password 
authentication are known in the art of computer security. In alternative embodiments, the 
personalization server 140 may use other and further authentication techniques in addition to 
or instead of username and password authentication. These other and further authentication 
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techniques can include any one of, or some combination of, identification using the following: 
software identification such as digital certificates or other digital encryption techniques, 
hardware identification such as processor identification information, "smart" cards, 
communication link authentication such as digital or analog telephone subscriber line 
5 identification information, or other known methods for identification or authentication. In 
preferred embodiments, authentication techniques can be associated with selected degrees of 
user access, so that greater or lesser authentication controls are placed on greater or lesser user 
access capabilities. 

1 0 Registering At A New Web Site 

The personalization server 140 is also disposed to maintain, in its database 
144, information about the user at the web client 1 10. This information is preferably recorded 
as one or more selectable profile for the user, so that the user can select one such profile for 
15 communication, identification and personalization for one or more selected web sites 1 30. 

When the user at the web client 1 10 wishes to register (and thus identify) 
themselves at a new web site 130, the web client 1 10 contacts the web site 130 in one of two 
ways: 

20 

o The user at the web client 1 1 0 contacts the web site 130 directly using the web client 
software 111. 

When this first technique is used, the user at the web client 1 10 provides an identifier 
25 1 52 (such as a URL) for an registration page 1 53 at the web site 1 30 to the 

personalization server 140. The user can use an additional command for the web 
client 1 10, or can execute an applet or complete a dialog box supplied by the 
personalization server 140. With this information, the personalization software 141 
performs registration using a profile selected by the user at the web client 1 10. 

30 

o The user at the web client 1 1 0 identifies a location (such as a URL) for the web site 
130 to the personalization server 140. The personalization server 140 contacts the 
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web site 130 in place of the user, as if the user had contacted the web site 130 directly 
using the web client software 111. 



When this second technique is used, the personalization software 141 recognizes the 
5 registration page 153 at the web site 130 and performs registration using a profile 

selected by the user at the web client 110. 

In a preferred embodiment, the personalization software 141 automatically 
completes the registration form 131 using any appropriate automated technique, such as 
10 known pattern matching, neural network, genetic algorithms, other techniques, or some 

combination thereof, to match names of requested form data fields with available profile data 
fields. 

In a preferred embodiment, the user at the web client 110 can designate none, 
15 some, or all of the information fields in the selected profile by as confidential. If an 

information field is designated confidential, the personalization software 141 asks the user to 
confirm that the user wishes to provide that information before sending it to the web site 130. 

The personalization server 140 is also disposed to maintain information about 
20 the web site 130, to record that information in its database 144, and to communicate with the 
web site 130 in response to that information. 



It can occur that the user at the web client 1 10 will need to complete the profile 
by adding further information. In such cases, the personalization server 140 completes the 
25 registration form accordingly if the user so directs. The personalization server 140 also 
updates its database 144 accordingly if the user so directs. Depending upon service 
management choices, the personalization server 140 can update some, all, or a group of 
profiles selected by the user. 

30 When the user at the web client 1 10 wishes to register with a new web site 1 30, 

the web client software 1 1 1 sends a message 151 to the personalization server 140 with an 
identifier 152 for an authentication page 153 at the web site 130. The web client software 1 1 1 
requests that the personalization server 140 register the user at that web site 130. 
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In response, the personalization server 140 sends a message 1 50 to the web site 
130 identifying the registration page 153. The personalization server 140 uses the profile 
information about the user at the web client 110, from its database 144, to respond to the web 
5 site 1 30 with information requested by the web site 1 30 for personalization. 

The personalization server 140 generates authentication information (such as a 
password) and records that authentication information in its database 144 in association with 
the user at the web client 1 1 0. For those web sites 130 that send an email message or other 
10 message back to the web client 1 1 0 with a site-selected password, the personalization server 
140 intercepts that message and records the site-selected password in its database 144. 

As part of authentication with a new web site, the personalization server 140 
causes any links or forms 154 identified to the web site 130 to point back to pages 153 at the 
15 personalization server 140, not the web client 110. Moreover, the personalization server 140 
can optionally (upon user instruction or otherwise) generate a unique email address for the 
web site 130 to identify the user at the web client 110, If so, the unique email address is given 
to the web site 130 instead of any regular email address at which the user might receive email. 

20 The personalization server 140 records any necessary identification and 

authentication information for the user, so that the personalization server 140 can 
automatically authenticate the user at the web site 130, upon receiving a request to do so from 
the web client 110. 

25 Selecting (and Logging Into) the Web Site 

When the user at the web client 1 10 wishes to identify (and authenticate) 
themselves to a already-registered web site 130, the web client software 1 1 1 sends a message 
151 to the personalization server 140 with an identifier 152 for a selection page 153 at the 
30 personalization server 140. The selection page 1 53 preferably includes information about 
each of the web sites 130 (and services offered thereat) at which the user has registered. In 
alternative embodiments, the selection page 1 53 can include links to additional and further 
selection pages 153, or can have a hierarchical or other format in other ways. 
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The personalization server 140 provides or dynamically generates the selection 
page 153 in response to information in the database 144 regarding the user, and in response to 
information in the database 144 regarding the web site 130. In a first preferred embodiment, 
5 the selection page 1 53 can be stored and updated at times selected by the personalization 
server 140 or the user, or can be dynamically generated at user direction. The selection page 
153 preferably includes an identifier (such as a name) for each registered web site 130, along 
with possibly other information: 

10 o information regarding use of the web site 130, such as a last use, frequency of use, or 
last page 153 requested from that web site 130; 



o information regarding commercial aspects of the web site 130, such as whether the 
web site 130 is fee-based, or whether the user's registration at the web site 130 is 
15 about to expire (or has expired and could be renewed); 



and 

o usage or other information provided by the web site 1 30 and aggregated by the 
personalization server 140. 

20 

The user can select one or more of the web sites 130 identified on the selection 
page 153 for connection. In response thereto, the personalization server 140 connects to each 
selected web site 130 and re-authenticates the user to that selected web site 130, In a 
preferred embodiment, personalization server 140 sends any identification and authentication 
25 information (such as a password) in an encrypted format. A secondary user with restricted 
access (as described below) thus cannot obtain unrestricted access to the web site 130 and 
services. 

In alternative embodiments, the personalization server 140 sends the 
30 identification and authentication information (such as a password) in an encrypted format to 
an applet or plug-in at the web client 1 10. The web client 1 1 0 invokes the applet or plug-in 
with the encrypted information to automatically identify and authenticate the user with the 
website 130. 
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In a preferred embodiment, the personalization server 140 maintains 
information about bookmarks, "favorites," viewed pages, or other important web sites 130 in 
its database 144, in association with the user. This allows the user to send a collection of 
5 bookmarks from a restricted web site 130 to a secondary user with restricted access (as 
described below). This information can also be used by the web client 1 10 to display those 
pages available at the web site 1 30 without having to actually having to re-register at the web 
site 130, This allows the user to access bookmark information for restricted web sites 130 
from any web client 110, whether or not web client 1 10 has the appropriate bookmark stored 
10 locally. 

Using the Selected Web Site(s) 

Upon or before authentication with the selected web site(s) 130, the web client 
15 software 1 1 1 can communicate directly with the web site software 13 1 to request and receive 
information. The user is thus able to maintain a single set of authentication information for 
access to multiple restricted web sites. 

In a preferred embodiment, the user can use the single set of authentication 
20 information to manage multiple restricted web sites, such as monitoring usage of cost-based 
services and being able to control or provide automated renewal of such services. For 
example, the user can order the personalization server 140 (and the personalization server 140 
can respond to such orders) to perform the following services: 

25 o automatic reminder of web sites 1 30 for which registration must be periodically 
renewed; 

o automatic renewal of registration at web sites 130 for which registration must be 
periodically renewed; 

30 

and 

o automatic de-registration from web sites 130 for which registration might be 
automatically renewed, but for which the user has no further interest. 

21 



WO 00/48110 



PCT/US00/03790 



Use by Secondary Users 

A first user can also request the personalization server 140 to allow a second 
5 user, possibly using the same web client 1 10 or possibly using a different web client 1 10, to 
access those web sites 130 for which the first user is registered. 

The personalization server 140 records information about those second users, 
including the scope of access they are permitted, in the database 144. The scope of access 
10 permitted to those second users can be limited in at least the following ways: 

o limitation to selected web sites 1 30 or selected classes of web sites 1 30; 

o limitation to selected services or selected classes of services; 

15 

o limitation to selected times or dates, or combinations thereof, whether once-only or 
periodically; 

o limitation to selected amounts of resources or services; 

20 

o limitation to selected numbers of such second users. 



or 

o limitation to read-only operations by such second users* 

25 

When one of those second users wishes to use the selected web sites 130, the 
second user requests the personalization server 140 to identify (and authenticate) themselves 
to the web site 130 as the first user. Thus, the web site 130 is deceived into believing that the 
second user is the true registered user. The personalization server 140, in response to the 
30 request and in response to the database 144, identifies (and authenticates) the second user to 
the web site 130 using the same information as the first user, while hiding authentication or 
other account information from the second user (such as a password). 
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In response to the database 144, the personalization server 140 can require that 
it mediates the second user's access to the web site 130, by requiring that all requests for 
information by the second user must first pass through the personalization server 140. This 
allows the personalization server 140 to perform one or more, or a combination of, the 
5 following: 

o prevent the web site 1 30 from sending cookies to the second user; 

o disable the second user from changing information for the first user's account at the 
10 website 130; 

and 

o restrict the second user to limited access, such as read-only access. 



15 Email Usage 

As noted above, the personalization server 140 generates a new email address 
for the first user when first identifying and authenticating that first user to a new web site 130. 
The personalization server 140 can accordingly restrict or partially restrict access by the 
20 second user to email received for that email address at the personalization server 140. (In a 
preferred embodiment, the second user is given no access to email for the first user.) 



The personalization server 140 provides web-based access to any email 
received for that email address from the web site 130. As part of this web-based access, the 
25 user at the web client 1 10 can request the personalization server 140 to perform the following 
services: 



o forwarding selected email to a selected target email address; 

30 o deleting or ignoring selected email for one of the web-site specific email addresses 
(with the result that selected email from any particular web site or associated service 
can be deleted or ignored); 
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o presenting selected email for one of the web-site specific email addresses using the 
web client software 111; 



or 

5 o providing the user of the web client software 1 1 1 with the ability to respond to 
selected email. 

System Operation 

10 Figure 2 shows a process flow diagram for a method of using a system for 

access to personalized web sites. 

A method 200 is performed by the system 100, including the web client 110, 
the communication network 120, the web server 130, and the personalization server 140. 

15 

Although described serially and in a particular sequence, in a preferred 
embodiment the steps described herein can be performed concurrently or in parallel by the 
system elements in response to more than one web client 1 10 or more than one web site 130, 
could be performed in a different sequence, or some combination thereof. 

20 

At a flow point 2 1 0, a first user at the web client 1 1 0 is ready to register with 
the personalization server 140. 

At a step 21 1, the web client software 1 1 1 sends a message 15 1 to the 
25 personalization server 140. The message 151 includes a request to register the first user. 

At a step 212, the personalization server 140 generates and sends a registration 
page 153 to the web client 1 10. The registration page 153 can be a standard form, or can be 
personalized in response to the user or in response to the web client 110. 

30 

At a step 213, the user supplies authentication and personalization information 
to the web client software 1 1 1 , in response to the registration page 1 53. 
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At a step 214, the web client software 1 1 1 sends the authentication and 
personalization information for the user to the personalization server 140. 



At a step 215, the personalization server 140 records the authentication and 
5 personalization information for the user in its database 144. 

At a flow point 220, a first user at the web client 1 10 is ready to register a new 
web site 130 with the personalization server 140. 

10 At a step 22 1 , the web client software 1 1 1 sends a message 1 5 1 to the 

personalization server 140. The message 151 includes a request to register the new web site 
130, and information about the web site 130 useful for registration, such as an identifier 152 
for a registration page 153 at the web site 130. 

15 At a step 222, the personalization server 140 generates and sends a message 

151 to request to register the first user with the web site 130. In a preferred embodiment, the 
message 151 requests the registration page 153 from the web site 130. 

At a step 223, the web site 130 generates and sends a registration page 153 to 
20 the personalization server 140. The nature of this activity by the web site 1 30 can vary widely 
and still be within the scope and spirit of the invention. 

At a step 224, the personalization server 140 responds to the web site 130. The 
personalization server 140 matches the registration request from web site 130 with profile 

25 information contained in the database 144 and supplies the authentication and personalization 
information for the user to the web site 130. In a preferred embodiment the personalization 
server 140 requires verification from the user by sending the web client 110 a corresponding 
message 151 (such as an HTML or XML page). In a preferred embodiment, the 
personalization server 140 generates a new email address for the user at the personalization 

30 server 140; this new email address is specific to both the user and to the web site 130. 



At a step 225, the web site 130 records the authentication and personalization 
information for the user in its database 134. 
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Some web sites 1 30 send an initial email message 15 1 to the user with further 
authentication information, such as a username and password. The personalization server 140 
receives this initial email message 151, parses it and if it includes further authentication 
5 information (such as a username and password), records that information in its database 144 
for the user. 

Some web sites 1 30 send a cookie or other data to the user with further 
authentication information. The personalization server 140 assures that the data (includeing 
10 whatever information is associated with the "cookie") is recorded at the personalization server 
140.. 

In a preferred embodiment, the personalization server 140 determines if the 
web site 130 sends a cookie to the web client 110. If so, the personalization server 140 sends 
15 a software assistant 1 15 to the web client 1 10 for the web client 1 10 to use when using the 
web site 130. The software assistant 1 15 assists the web client software 1 1 1 and the 
personalization server 140 by assuring that information in the cookie is available to the 
personalization server 140. 

20 In a preferred embodiment, the software assistant 1 1 5 includes a web browser 

plug-in, or a program fragment (such as an applet or JavaScript code), or some other 
application that operates in conjunction with the web client software 111. 

At a flow point 230, a first user at the web client 1 10 is ready to identify and 
25 authenticate themselves with a web site 130, using the personalization server 140. 

At a step 23 1 , the web client software 1 1 1 sends a message 1 5 1 to the 
personalization server 140. The message 151 includes a request to identify and authenticate 
the user with a web site 1 30. 

30 

At a step 232, the personalization server 140 generates a registration page 1 53. 
The registration page 153 identifies those web sites 130 for which the user is registered (or 
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has bookmarks), and allows the user to select one or more at which to identify and 
authenticate themselves. 

At a step 233, the user selects one or more web sites 130 at which to identify 
and authenticate themselves. The web client software 1 1 1 sends a message 151 to the 
personalization server 140 indicating those web sites 130. 

At a step 234, the personalization server 140 sends an authentication message 
to the web site 130. The personalization server 140, either directly or indirectly (using the 
web client 1 10), supplies the authentication and personalization information for the user to the 
web site 130. 

At a step 235, the web site 130 authenticates the user and allows the web client 
software 1 1 1 access to otherwise restricted information or services. 

At a flow point 240, a first user at the web client 1 10 is ready to access email 
directed to the first user at the personalization server 140. 

At a step 24 1 , the web client software 1 1 1 sends a message 1 5 1 to the 
personalization server 140. The message 151 includes a request to access email at the 
personalization server 140. 

At a step 242, the personalization server 140 generates and sends a message 
151 in response to the web client 1 10. In a preferred embodiment, the message 151 indicates 
for which email addresses any email has been received, and can further summarize that email 
(such as by presenting headers or subject lines). 

At a step 243, the user accesses email at the personalization server 140 using 
known web-based email methods. In addition to known web-based email methods, the user 
can direct the personalization server 140 to eliminate email addresses for one or more selected 
web sites 1 30, or to forward email for one or more selected web sites 1 30 to a selected target 
email address (possibly at another location). 
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At a flow point 250, a first user at the web client 1 10 is ready to allow access 
by a second user to one or more selected web sites 130. 



At a step 25 1 , the web client software 1 1 1 sends a message 1 5 1 to the 
5 personalization server 140. The message 1 5 1 includes a request to allow access by a second 
user to one or more selected web sites 130. 

At a step 252, the personalization server 140 generates a selection page 153 
and sends that page 153 to the web client 1 10. The selection page 153 indicates a set of web 
10 sites 130 for which the first user has access and indicates a set of types of restrictions on that 
access the first user can order the personalization server 140 to implement. 

At a step 253, the web client software 1 1 1 presents the selection page 153 to 
the user. The user selects one or more web sites 130, as well as associated restrictions on 
15 information or services at those web sites 130, and identifies a set of second users to be 
allowed restricted access. 

At a step 254, the web client software 1 1 1 sends a message 1 5 1 to the 
personalization server 140 with the selections made by the first user. The personalization 
20 server 140 receives the message 151 and records associated information in its database 144. 

At a flow point 260, a second user at the web client 1 10 is ready to access one 
or more selected web sites 130 using the personalization server 140. 

25 At a step 261 , similar to the step 23 1 , the web client software 1 1 1 sends a 

message 151 to the personalization server 140. The message 151 includes a request to 
identify and authenticate the second user with a web site 130. 

At a step 262, the personalization server 140 determines, in response to its 
30 database 144, the degree of access allowed to the second user. For example, the second user 
can have been authorized by (one or another) first user to have access, or the second user can 
have independent access to the web site 130 in response to a separate registration with the 
personalization server 140. 
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In response to the degree of allowed access, similar to the step 232, the 
personalization server 140 generates a registration page 153. The registration page 153 
identifies those web sites 130 for which the second user is allowed access, by (one or another) 
5 first user or independently, and allows the second user to select one or more at which to 
access (either for identification and authentication, or for bookmarks, to directly access). 

At a step 233, the second user selects one or more web sites 130 at which to 
identify and authenticate themselves. The web client software 1 1 1 sends a message 15 1 to the 
10 personalization server 140 indicating those web sites 130. 

At a step 234, the personalization server 140 supplies the authentication and 
personalization information for the first user to the web site 130 (even though the second user 
is the one to actually use the web site 130), either directly to the web site 1 30, or using the 
15 web client software 111. The choice of whether authenticate and personalize the second user 
directly or indirectly can be responsive to a parameter selected by the first user. 

At a step 235, the web site 130 authenticates the second user (in response to 
the first user's authentication and personalization information) and allows the web client 
20 software 1 1 1 for the second user access to otherwise restricted information or services. 

II. 

System Elements 

25 Figure 3 shows a block diagram of a system for group access to web sites. 

A system 100 includes a set of web clients 1 10, a communication network 120, 
at least one web site 130, and a group surfing server 140. 

30 As used herein, the terms "client" and "server" refer to client-server 

relationships between client and server, not necessarily to particular physical devices. 
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As used herein, the phrase "web client" includes any combination of devices or 
software taking on the role of a client in a client-server environment in the internet, the world 
wide web, or an equivalent or extension thereof There is no particular requirement that the 
web clients 110 must be individual devices. They can each be a single device, a set of 
5 cooperating devices, a portion of a device, or some combination thereof (such as for example 
a device providing web server services that acts as an agent of the user). 

As used herein, the phrase "web site" includes any combination of devices or 
software taking on the role of a server in a client-server environment in the internet, the world 
10 wide web, or an equivalent or extension thereof. There is no particular requirement that the 
web sites 130 must be individual devices. They can each be a single device, a set of 
cooperating devices, a portion of a device, or some combination thereof. 

The web clients 1 10 each include a processor operating under control of web 
15 client software 111, such as a web browser, and disposed for use by an operator or user 1 1 2. 
In a preferred embodiment, the web client software 1 1 1 includes software disposed for 
communicating with the web site(s) 130 using a communication protocol, as described below. 

In a preferred embodiment, the web clients 110 each include a general-purpose 
20 computer, such as a laptop or workstation. However, the web clients 1 10 can also include 
(either alone or in conjunction with a laptop or workstation), a hand-held calendar (such as a 
"Palm Pilot" or other hand-held device), a portable computer, a special purpose computer, a 
cellular telephone or other telephonic device, a web server acting as the agent for a user, or 
another device. In alternative embodiments, the web clients 110 may also include any other 
25 device disposed for performing the all or some functions described herein. The location, the 
type of device, and the nature of the connection of the web clients 1 1 0 to the web site 1 30 can 
each differ between pairs of connection sessions between the web clients 110 and the web site 
130. 

30 In a preferred embodiment, the communication network 120 includes a packet 

switched network such as the Internet, as well as (in conjunction with or instead of) an 
intranet, an enterprise network, an extranet, a virtual private network, a virtual switched 
network. In alternative embodiments, the communication network 120 may include any other 
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set of communication links that couple the web clients 1 10, web site 130, and group-surfing 
server 140 so they can perform the functions described herein. 



The communication network 120 is disposed for transporting messages 151 
5 between any two of the web clients 110, the web site 130, and the group-surfing server 140. 
The messages 151 are formatted in the communication protocol recognized by the web clients 
1 10, the web site 130, and the group-surfing server 140. In a preferred embodiment, the 
communication protocol includes TCP/IP (transfer control protocol/ Internet protocol), or 
HTTP (hypertext transfer protocol) a variant thereof, such as HTTPS (secure HTTP). In a 
10 preferred embodiment, the communication protocol can include an additional protocol 
operating over TCP/IP. The communication protocol can also include other protocols for 
requesting and sending information, including FTP (file transfer protocol), Gopher, and 
variants thereof. Although the description refers herein primarily to HTTP and TCP/IP, those 
of ordinary skill in the art will recognize, after perusing this application, that use of the 
1 5 invention with other protocols would not require new invention or undue experimentation. 

In a preferred embodiment, those messages 1 5 1 that request information can 
include an identifier 152 for a requested page 153. The page 153 includes a set of 
information, possibly including data in one of a number of formats, and possibly also includes 
20 a set number of links 1 54 to other pages 153. Each link 1 54 includes an identifier 1 52 for its 
target page 153, and information about the target page 153 (such as a title). 

In a preferred embodiment, each page 1 53 can include data in the form of text, 
images (still or animated), sound, program fragments (such as applets, applications, or 
25 JavaScript), or combinations thereof. 

In a preferred embodiment, the web site 130 includes a processor operating 
under control of web server software 131, and disposed for delivering information 132 to the 
web clients 1 10 or the group-surfing server 140 in response to requests made using the 
30 communication protocol. In a preferred embodiment, the web site 130 includes software 
disposed for communicating with the web clients 1 10 or the group-surfing server 140 using 
the communication protocol 
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The web client software 1 1 1 is disposed for sending a message 1 5 1 to the 
group-surfing server 140, to request the group-surfing server 140 to respond and perform 
5 functions described herein. In a preferred embodiment, the message 1 5 1 is responsive to an 
action by the user of the web client software 111, such as by selecting a web page or a link to 
a web page. 

A first web client 1 1 0 sends a session-creation message 1 5 1 to the group- 
10 surfing server 140, to request the group-surfing server 140 to create or set up a group-surfing 
session. In a preferred embodiment, the message 151 includes an identifier for the group- 
surfing session, so that other web clients 1 10 can add themselves to that session. (The group- 
surfing server 140 can also assign this identifier in a reply to the session-creation message 
151.) In a preferred embodiment, the message 1 5 1 includes identifiers for a set of web clients 
15 110 participating in, permitted to participate in, or forbidden from participating in, that 

session. The web client 1 10 can alternatively specify that the session is open to anyone. The 
web client 110 can also specify a time schedule for the session (these functions can be 
combined, so that for example, the session can be open to anyone for a selected time period, 
after which only certain authorized users may participate). 

20 

In a preferred embodiment, the message 151 can also include an identifier 152 
for an initial page 153 for the group-surfing session. For example, the initial page 153 can 
include a home page for a selected web site 130 or a welcome page for a selected service 
available at the selected web site 130. 

25 

The group-surfing server 140 receives the session-creation message 151, and 
responds by (1) creating a group-surfing session, and (2) informing the participants in the 
group-surfing session. When the session-creation message 155 includes an identifier 152 for 
an initial page 153, the group-surfing server 140 proceeds to begin operation of the group- 
30 surfing session, as described below, causing the web site 130 to deliver the initial page 153 to 
the web clients 110 participating in the session. 
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After creating the group-surfing session, the group-surfing server 140 prepares 
to add additional web clients 1 10 to the session. To add itself to the session, a second (or 
further) web client 110 sends a session-join message 151 to the group-surfing server 140. In a 
preferred embodiment, the message 1 5 1 includes the identifier for the group-surfing session. 

5 

The group-surfing server 140 receives the session-join message 151, and 
responds by adding the new web client 1 1 0 to the group-surfing session. The group-surfing 
server 140 can also inform the other participants in the group-surfing session of the newly 
added web client 1 10. The group-surfing server 140 causes the newly added web client 110 
10 to participate in the session, as described below. 

Operating the Group-Surfing Session 

One or more of the web clients 1 10 are designated by the group-surfing server 
15 140 as a controlling web client 1 1 0, and are therefore empowered by the group-surfing server 
140 to control the group surfing session. The choice of which web clients 1 10 are designated 
as the controlling web clients 1 10 can be made in any one of, or some combination of, a 
variety of techniques: 

20 o The controlling web clients 1 1 0 are identified in the session-creation message 151. 

o The controlling web client 1 10 is, or the controlling web clients 1 10 are selected by 
(either once at the beginning of the session or dynamically at times throughout the session), 
the web client 110 that contacted the group-surfing server 140 to create the session. 

25 

o The controlling web clients 1 1 0 are designated using a random or pseudo-random 
technique by the group-surfing server 140 from those web clients 1 10 participating in the 
session. 

30 o The controlling web clients 1 1 0 are designated by a majority or plurality vote of all 
web clients 1 10 participating in the session. 
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o The controlling web clients 1 1 0 are the first M of the first N web clients 1 10 
participating in the session that attempt to select a next page. The selection of which M out of 
N web clients 1 10 can be made by the group-surfing server 140 using a random or pseudo- 
random technique, a clustering technique for selecting web clients 1 10 that are similar, or 
5 another technique. 

o The controlling web clients 1 10 are selected by the group-surfing server 140 to be all 
those web clients 1 1 0 participating in the session that meet selected criteria. The selected 
criteria can be rule-based, such as for example (a) those web clients 1 10 having ".edu" as their 
10 primary domain or ".aol" as their secondary domain, (b) those web clients 1 1 0 having 
participated in the session for more than N seconds, (c) those web clients 1 10 having 
participated in the session but not yet having been selected as the controlling web client 1 10, 
or some combination thereof. 

15 If the controlling web client 1 10 is a single web client 1 10, that single 

controlling web client 1 10 determines the progression of pages 153 viewed during the group- 
surfing session, as described below. 

If there is more than one controlling web client 110, those controlling web 
20 clients 1 10 act in concert to determine the progression of pages 1 53 viewed during the group- 
surfing session. The group-surfing server 140 can determine the progression of pages 153 in 
any one of, or some combination of, a variety of techniques: 

o The first page 153 selected by any controlling web client 1 10 is selected as the next 
25 one in the progression of pages 1 53 in the session. 

o The next one in the progression of pages 1 53 in the session is designated using a 
random or pseudo-random technique by the group-surfing server 140 from those pages 153 
selected by any of the controlling web clients 1 10. 

30 

o The next one in the progression of pages 1 53 in the session is designated using a 
round-robin technique by the group-surfing server 140 from those pages 153 selected by any 
of the controlling web clients 1 1 0. 
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o The page 153 selected by a majority or a plurality of controlling web clients 1 10 is 
selected as the next one in the progression of pages 153 in the session. 

5 In any event, the group-surfing server 140 determines a next one in the 

progression of pages 153 in the session. The group-surfing server 140 contacts the web site 
130 having that next page 1 53, and directs that target web site 130 to deliver that next page 
153 so it can be presented to those web clients 1 10 participating in the session. 

10 In a preferred embodiment, the group-surfing server 140 directs the target web 

site 130 to deliver that next page 153 to the group-surfing server 140 itself. The group-surfing 
server 140 then re-sends that page 153 to those web clients 1 1 0 participating in the session. 
This allows usage of a single set of "cookies," or other data related to identity or session, sent 
by the web site 130 and stored by the group-surfing server 140 at each participating web 

15 client 110, 

In alternative embodiments, where no "cookies" or other data related to 
identity are involved, each web client 1 10 can receive the next page 153 directly from the web 
site 130. In some such alternative embodiments, the group-surfing server 140 may retrieve 
20 that next page 1 53 itself from the target web site 1 30, and re-send that next page 1 53 to each 
web client 1 10 participating in the session. In other such alternative embodiments, the group- 
surfing server 140 may use a multicast protocol such as the IGMP protocol (Internet Group 
Management Protocol), to multicast the next page 153 to those web clients 1 10 participating 
in the session. 

25 

As the controlling web client 110 selects a progression of pages 1 53 for the 
session, that progression of pages 153 is presented at each of the web clients 1 10 participating 
in the session. 

30 If any web client 110 participating in the session desires to leave the session, 

either permanently or temporarily, that web client 1 10 sends a session-exit message 151 to the 
group-surfing server 140. The group-surfing server 140 receives the session-exit message 
151, and responds by removing the exiting web client 1 10 from the group-surfing session. 
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The group-surfing server 140 can also inform the other participants in the group-surfing 
session of the exiting web client 1 10. The group-surfing server 140 causes the exiting web 
client 1 10 to no longer participate in the session. 

5 The functions for the web site 1 30 are not substantially different from those 

performed by the web site 130 in response to similar requests from others, including possibly 
the web client software 111. Accordingly, there is no particular requirement that the web 
server 130 be modified to operate in conjunction with the web client software 1 1 1 and the 
group-surfing server 140 to perform the functions described herein. 

10 

When performing group-surfing for more than one type of web client 130 
(such as a first web client 130 including a personal computer and a second web client 130 
including a "Palm Pilot" device), the group-surfing server 140 makes multiple requests for the 
web site 130 to send (variants of) the same page, so as to retrieve the must suited version of 
15 the page for each separate web client 1 10. The group-surfing server 140 forwards to each 
separate web client 1 10 the variant of the page that is most suited to that separate web client 
110. 

Efficient Group-Surfing Session Activity 

20 

In a preferred embodiment, load is reduced on the group-surfing server 140 
using a program fragment loaded at each web client 1 10. The program fragment can include 
one or more of, or any combination of, a Java applet, a section of JavaScript code, a web 
browser plug-in, an active-X element, or another technique for interfacing with the web client 
25 110 and affecting its operation with the web site 1 30 and the group-surfing server 140. 

The program fragment can be sent from the group-surfing server 140 to the 
web client 1 10, or can be resident at the web client 1 10. The program fragment can be loaded 
dynamically for the session, or can be permanently resident but only active for the session. 

30 

The program fragment can perform one or more of, or some combination of, 
the following functions: 
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o The program fragment can detect embedded frames included in selected pages 1 53 
and request the group-surfing server 140 to retrieve those frames from the web site 130 and 
send them to the web client 1 1 0. 

5 o The program fragment can intercept selection of a link 1 52 at the web client 1 1 0 and 
direct that selection to the group-surfing server 140 for processing. 

o The program fragment can intercept "submit" selections by the web client 110 during 
posting of HTML forms, and direct the information in those "submit" selections to the group- 
1 0 surfing server 1 40 for processing. 

o The program fragment can intercept HTML instructions in selected pages 153, which 
instructions would interfere with the screen layout used for the session (such as HTML code 
that attempts to force itself into a top-level frame). 



15 



20 



o The program fragment can detect embedded multimedia objects included in selected 
pages 1 53 and request those multimedia objects directly from the web site 130. 

Variations on the Group-Surfing Session 



There are many variations of techniques by which individual web clients 110 
can access information from web sites 130. There are similarly many variations of techniques 
by which the controlling web client 1 1 0 can access information from web sites 130 and cause 
that information to be presented to those web clients 1 10 participating in the session. These 
25 can include one or more of, or some combination of, the following: 

Web Page Look Ahead 

The controlling web client 1 10 can select web pages 153 for "look ahead" 
30 before designating those web pages 1 53 as next pages 153 in the progression of pages 1 53 in 
the session. This allows the controlling web client 1 10 to provide for one or more of, or some 
combination of, the following contingencies: 
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o The user 1 1 2 at the controlling web client 1 1 0 can determine if the selected "look 
ahead" pages 153 are accessible at the time of the session. For example, some such pages 153 
can be subject to restricted access in response to time or usage constraints. 

o The user 1 12 at the controlling web client 1 1 0 can determine if the selected "look 
ahead" pages 1 53 are appropriate for the web clients 1 1 0 participating in the session. For a 
first example, some such pages 153 can include information that is immaterial to the session 
(such as for a class, a seminar, or a demonstration of a product or service). For a second 
example, some such pages 1 53 can include information that is inappropriate for the session 
(such as so-called "adult-oriented" material for a session including users 1 12 who are minors). 

o The user 1 12 at the controlling web client 1 10 can determine if the selected "look 
ahead" pages 153 require special access (such as password restriction or cost-burdened 
services). For a first example, the controlling web client 110 can choose to exclude such 
15 pages 153 from the session. For a second example, the controlling web client 1 10 can choose 
to accept such special access (such as entering a password or credit card number) without 
presenting that acceptance to other web clients 1 10 participating in the session. 

Web Page Special Access 

The controlling web client 1 10 can select web pages 153 for special access 
when designating those web pages 153 as next pages 1 53 in the progression of pages 153 in 
the session. For a first example, the controlling web client 1 10 can enter information required 
for special access privately, without presenting that information to other web clients 1 10 
participating in the session. For a second example, the controlling web client 1 10 can enter 
such information (such as for completing an HTML "form") using information available 
from, and supplied by, other web clients 1 10 participating in the session. 

Web Page Automatic Form Completion 
30 

In a preferred embodiment, the controlling web client 1 10 enters information 
to complete the HTML form, and sends that information to the group-surfing server 140. The 
group-surfing server 140 enters information to complete the HTML form, and sends that 
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information to the web site 130. When the web site 130 replies with a new page, the group- 
surfing server 140 sends that new page to all participating web clients 130. 



In alternative embodiments, the when the controlling web client 110 enters 
5 information to complete the HTML form, and sends that information to the group-surfing 
server 1 40, the group-surfing server 1 40 may present that information on the HTML form at 
each participating web client 1 10, so that each participating web client 110 can see the HTML 
form being filled in. The group-surfing server 140 may present that information on the 
HTML form as each field of the form is completed, or when the entire form is completed, or 
10 at other times. 

Payment for Web Site Services 

The controlling web client 1 10 can select web pages 153 for paid access, even 
15 if the web clients 110 participating in the session do not have the right to such paid access. 
The group-surfing server 140 can control paid access in one or more of, or some combination 
of, the following techniques: 

o The controlling web client 1 10 can pay for that access itself, effectively presenting a 
20 gift of services to participating web clients 1 10. 

o The group-surfing server 140 can exact a payment from accounts of those 
participating web clients 110. This payment can be a pro-rata share of the actual cost to the 
controlling web client 1 10, can be a pre-selected amount agreed by the participating web 
25 clients 1 10, or can be a commission paid to the group-surfing server 1 40 by the transacting 
web site 130. 

o The group-surfing server 140 can exact such payment only from those participating 
web clients 1 10 that choose to have the paid information or services presented to them as part 
30 of the session. The participating web clients 1 10 can make this decision either at the time 
they join the session or at the time the payment for information or services is (about to be) 
incurred. 
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The controlling web client 1 10 can select web pages 153 for participation in 
electronic commerce. For example, the controlling web client 1 10 can order goods or 
5 services for delivery. Similar to payment for web site services, the web clients 1 10 

participating in the session need not be required to participate in this electronic commerce. 
The group-surfing server 140 can control such electronic commerce in one or more of, or 
some combination of, the following techniques: 

10 o The controlling web client 1 1 0 can pay for the ordered goods or services itself, 
effectively presenting gifts to participating web clients 110. 

o The group-surfing server 140 can exact payment from accounts of those participating 
web clients 1 10 for a single instance of such electronic commerce. This payment can be a 
15 pro-rata share of the actual cost to the controlling web client 1 10, can be a pre-selected 

amount agreed by the participating web clients 1 10, or can be a commission paid to the group- 
surfing server 140 by the transacting web site 130. 

o The group-surfing server 140 can exact such payment only from those participating 
20 web clients 110 that choose to have the paid information or services presented to them as part 
of the session. Similarly to paid web site services, the participating web clients 110 can make 
this decision either at the time they join the session or at the time the payment for information 
or services is (about to be) incurred. 

25 o The group-surfing server 140 can duplicate the electronic commerce transaction for 
each participating web client 1 10 that chooses to participate. Similarly to paid web site 
services, the participating web clients 110 can make this decision either at the time they join 
the session or at the time the payment for information or services is (about to be) incurred. 

30 and 

o The group-surfing server 140 can receive a pre-payment prior to the group-surfing 
session, so that an associated web client participating that chooses to participate in the group- 
surfing session can use that payment for electronic commerce. Thus, the group-surfing server 
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140 can allow payments from a pre-paid (or otherwise arranged) "account" on behalf of one 
or more of, or a class of. web clients 1 1 0. 



This function can be useful for making joint decisions regarding electronic 
5 commerce, such as for selecting gifts for third parties or for one of the session participants. 



Import and Export of Web Site Information 

The controlling web client 1 10 can import or export information related to web 
10 sites 130, including bookmarks, "cookies," and user registrations at participating web sites 
130. Similarly to paid web site services, web clients 110 participating in the session can 
choose whether or not to participate in these import or export operations. 



15 



Use in Conjunction with Intra-User Communication 



Those web clients 1 10 participating in the session can also communicate 
between and among groups of users 1 12 at those web clients 1 10. The techniques used for 
communication can include one or more of, or some combination of, the following: telephone 
communication, voice over IP, Internet chat, electronic mail, "instant messaging," or other 
20 intra-user communication. In a preferred embodiment, the communication technique can be 
presented to each web client 1 10 at the initiation of the group-surfing server 140, using either 
a same or a separate window at the web client 110. 



Use in Conjunction with Other Network Functions 

25 

Those web clients 110 participating in the session can also perform other 
functions associated with the network. For example, the use of the invention in conjunction 
with electronic commerce is described above. 

30 The invention can also be used for remote training functions. In such uses, one 

or more of the participating web clients 110 would be instructors, teachers, seminar 
presenters, discussion facilitators, or other types of moderator. These participating web 
clients 1 10 can be controlling web clients 110. Additional participating web clients 1 10 (who 
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could substantially outnumber the moderators) would be students, seminar participants or 
reviewers, discussion participants, or negotiating parties. The instructors or moderators can 
use the group-surfing process to present information to the students or participants, to confirm 
assumptions or assertions using available reference services or reference works, and the like. 

5 

The invention can also be used for virtual displays or tours. In such uses, one 
or more of the participating web clients 110 would be salespeople, docents, presenters, or 
other types of guide. These participating web clients 1 10 can be controlling web clients 1 10. 
Additional participating web clients 1 10 (who could substantially outnumber the moderators 

10 or could be interacting one-to-one with the salesperson or guide) would be potential 

customers or virtual tourists. The salespeople or guides can use the group-surfing process to 
present information to the potential customers or virtual tourists in response to perceived 
desires or tastes of the potential customers or virtual tourists, using available reference 
material, including maps, pictures, and other visual data. In a preferred embodiment of such 

15 uses, the available reference material includes a VRML (virtual reality markup language) 
server, at which three-dimensionally viewable information about the topic of the presentation 
or tour is available. For example, the three-dimensionally viewable information can include 
presentations of real estate for sale, or a virtual art gallery. 



20 The invention can also be used for telemedicine or other process telecontrol. 

In such uses, one or more of the participating web clients 110 would be controlling surgeons, 
physicians, other medical personnel, or other consultants. These participating web clients 1 10 
can be controlling web clients 1 10. Additional participating web clients 110 would be on-site 
medical personnel, on-site engineering personnel, or robotic devices. The controlling medical 

25 personnel can use the group-surfing process to review information about a patient (or a 
controllable physical process, such as an oil refinery or a semiconductor manufacturing 
facility), to make suggestions or issue orders regarding treatment, and to directly control 
robotic devices or sensor apparatus. 

30 The invention can also be used for consulting (such as in the fields of finance, 

advertising or marketing). In such uses, one or more of the participating web clients 1 10 
would be consultants. These participating web clients 1 10 can be controlling web clients 1 10. 
Additional participating web clients 1 10 would be the consultants' (human) client or clients, 
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such as marketing personnel. The consultant can use the group-surfing process to present 
information to the client, including new or proposed presentation material, or presentation 
material from competitors or other participants in the electronic marketplace. 

5 Multiple Group-Surfing "Channels" 

The group-surfing server 140 can maintain more than one separate group- 
surfing session, with each separate group-surfing session having its own history of viewed 
pages. When a web client 1 10 adds itself to the participating web clients 1 10 in a group- 
10 surfing session, it is presented with the most recent viewed page, and is able to review the 
history of pages viewed prior to joining that group-surfing session. 

In a preferred embodiment, when an individual user of a web client 1 10 using 
ordinary web surfing techniques comes upon a page that the user desires to share, that user 

15 can, using its web client 1 1 0, send a message to the group-surfing server 140 to add that page 
to a group-surfing session. Each such web client 1 10 can have its own personalized group- 
surfing session, which a second web client 1 1 0 can view and view the history thereof If the 
second web client 1 10 is already participating in that group-surfing session, the page would be 
presented to the second web client 1 10 when it is sent by the first web client 1 1 0 to the group- 

20 surfing server 140. In alternative embodiments, the second web client 110 can receive only a 
list of pointers (such as URLs) to those pages presented during the group-surfing session, 
dynamically updated when a new page is added. 

System Operation 

25 

Figure 4 shows a process flow diagram for a method of using a system for 
group access to web sites. 

A method 200 is performed by the system 100, including the web client 110, 
30 the communication network 120, the web server 130, and the group-surfing server 140. 
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Although described serially and in a particular sequence, in a preferred 
embodiment the steps described herein can be performed concurrently or in parallel by the 
system elements, could be performed in a different sequence or some combination thereof. 

5 At a flow point 210, the group-surfing server 140 is ready to create a group- 

surfing session. 

At a step 21 1, a first web client 110 sends a session-creation message 151 to 
the group-surfing server 140, as described above, to request the group-surfing server 140 to 
10 create or set up a group-surfing session. 

At a step 212, the group-surfing server 140 receives the session-creation 
message 151. The group-surfing server 140 (1) creates the group-surfing session* and (2) 
informs the participants in the group-surfing session. 

15 

The method 200 continues at the flow point 220. 



At a flow point 220, the group-surfing server 140 is ready to add web clients 
1 10 to a group-surfing session. 

20 

At a step 221, a second (or further) web client 110 sends a session-join 
message 151 to the group-surfing server 140, as described above. 

At a step 222, the group-surfing server 140 receives the session-join message 
25 151. The group-surfing server 140 (1) adds the new web client 1 10 to the group-surfing 

session, and (2) inform the other participants in the group-surfing session of the newly added 
web client 110. 



At a step 223, the group-surfing server 140 sends to the new web client 110 a 
30 program fragment (preferably a Java applet and JavaScript code) that processes those pages 
153 received as part of the session. When the new web client 1 10 selects a link 1 52 on one 
such page 153, the program fragment intercepts the request before it is sent to the web site 
130, and redirects the selection to the group-surfing server 140. The group-surfing server 140 
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is thus able to determine which next pages 1 53 are selected, and to assure that such next pages 
153 are presented to all participating web clients 110. 



The method 200 continues at the flow point 230. 

5 

At a flow point 230, the group-surfing server 140 is ready to perform a group- 
surfing session. 

At a step 231, the group-surfing server 140 designates one or more controlling 
10 web clients 1 10, as described above. In a preferred embodiment, the first web client 1 10, 
which sent the session-creation message 151, is the single controlling web client 1 10. 

At a step 232, the controlling web client 1 10 receives a page 153 from the 
group-surfing server 140, which received that page 153 from the web site 130. When the 
15 controlling web client 1 10 selects a link 152 on the page 153, the selection is caught by the 
program fragment, which sends the selection to the group-surfing server 140 as described 
below (preferably using a protocol operating on top of TCP/IP). In alternative embodiments, 
the group-surfing server 140 may modify the links 152 in the page 153 before presenting that 
page 153 to web clients 110 participating in the session. 



20 



At a step 233, the controlling web client 110 sends a next-page message 151 to 
the group-surfing server 140, indicating the next page 153 in the progression of pages 153 in 
the session. 



25 At a step 234, the group-surfing server 140 receives the next-page message 

151. The group-surfing server 140 (1) contacts the web site 130 having that next page 153 
after adding proper cookie or other identity information, and directs that target web site 130 to 
deliver that next page 153 to the group-surfing server 140 itself The group-surfing server 
140 then re-sends that page 1 53 to those web clients 110 participating in the session. 

30 

In a preferred embodiment, in order to reduce load on the group-serving server 
140, the group-serving server 140 sends only the page 153 itself without any multimedia 
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elements (such as embedded sound, images, or program fragments). Each participating web 
client 110 requests those multimedia elements directly from the web site 130. 



At a step 235, the page 153 is presented at each of the web clients 1 10 
5 participating in the session. 

At a step 236, if the group-surfing server 140 receives a "cookie" or other data 
relating to identity or session from the web site 130, the group-surfing server 140 records the 
"cookie" in a cookie database relatively local to the group-surfing server 140 and session. 
10 Each time the group-surfing server 140 requests a page from the web site 1 30, the group- 
surfing server 140 also sends any relevant "cookies" that were received from the web site 130. 

The step 231, the step 232, the step 233, the step 234, the step 235, and the step 
236 are performed repeatedly so that the progression of pages is presented at each of the web 
1 5 clients 1 1 0 participating in the session. 



At a flow point 240, a selected web client 1 10 is ready to leave the session. 



At a step 241, the selected web client 110 sends a session-exit message 151 to 
20 the group-surfing server 140. 

At a step 242, the group-surfing server 140 receives the session-exit message 
151. The group-surfing server 140 (1) removes the exiting web client 110 from the group- 
surfing session, and (2) informs the other participants in the group-surfing session of the 
25 exiting web client 110. 

In a preferred embodiment, if the controlling web client 1 10 leaves the session, 
the group-surfing server 140 (1) terminates the session, and (2) informs the participants in the 
group-surfing session. 



30 



At a flow point 250, the controlling web client 1 10 is ready to select web pages 
153 for "look ahead." 
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At a step 251, the controlling web client 1 10 sends a look-ahead-start message 
151 to the group-surfing server 140. 



At a step 252, the group-surfing server 140 receives the look-ahead-start 
5 message 151. The group-surfing server 140 refrains from presenting following pages 1 53 to 
participants in the session. 

At a step 253, the controlling web client 1 10 sends messages 1 5 1 to one or 
more web sites 130 to request pages 153 and receive information from those web sites 130, 
10 without having that information presented to participants in the session. 

At a step 254, the controlling web client 1 10 sends a look-ahead-stop message 
1 5 1 to the group-surfing server 140. 

15 At a step 255, the group-surfing server 140 receives the look-ahead-stop 

message 151. The group-surfing server 140 returns to presenting following pages 153 to 
participants in the session. 

At a flow point 260, the controlling web client 1 10 is ready to select web pages 
20 153 for "special access." 

At a step 261, the controlling web client 110 sends a special-access-start 
message 151 to the group-surfing server 140. 

25 At a step 262, the group-surfing server 140 receives the special-access-start 

message 151. The group-surfing server 140 refrains from presenting access or authentication 
information (such as HTML forms) to participants in the session. 

At a step 263, the controlling web client 1 10 sends messages 1 51 to one or 
30 more web sites 1 30 to obtain access to those web sites 1 30, without having that information 
presented to participants in the session. 
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At a step 264, the controlling web client 1 10 sends a special-access-stop 
message 151 to the group-surfing server 140. 



At a step 265, the group-surfing server 140 receives the special-access-stop 
5 message 151. The group-surfing server 140 returns to regular presentation of information in 
pages 153 to participants in the session. 

At a flow point 270, the controlling web client 1 10 is ready to select web pages 
153 for paid access. 

10 

In a preferred embodiment, the group-surfing server 140 does not exact any 
payment from the web clients 1 10 participating in the session. Accordingly, all paid access is 
paid for by the controlling web client 1 10, and is effectively given away free to those web 
clients 1 10 participating in the session. The group-surfing server 140 takes no special action. 

15 

At a flow point 280, the controlling web client 1 10 is ready to select web pages 
153 for participation in electronic commerce. 

In a preferred embodiment, the group-surfing server 140 does not exact any 
20 payment for participation in electronic commerce. Accordingly, all electronic commerce is 
paid for by the controlling web client 110, and (if a service) is effectively given away free to 
those web clients 110 participating in the session. The group-surfing server 140 takes no 
special action. 

25 In alternative embodiments, the group-surfing server 140 may be registered as 

a partner or affiliate of the web site 130, and thus receives a commission from the web site 
130 for electronic commerce conducted during the session. 

At a flow point 290, the controlling web client 1 10 is ready to import or export 
30 information related to web sites 1 30. 
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At a step 291, the controlling web client 110 sends an import-export message 
15 1 to the group-surfing server 140, directing import or export of information relating to web 
sites (such as bookmarks, "cookies," or user registrations at participating web sites 130) 

5 At a step 292, the group-surfing server 140 receives the import-export message 

151. The group-surfing server 140 imports or exports the designated information to selected 
databases at web clients 1 10 participating in the session that indicate their willingness to 
participate in the import or export operation. 

10 In a preferred embodiment, the selected databases are specific to a 

cookie/identity database for the group-surfing session. In alternative embodiments, the 
selected databases may also be available to other applications for web use, such as bookmark 
and registration databases for generic web surfing. The selected databases can be managed by 
the program fragment sent to the web client 1 10 from the group-surfing server 140, or by 

1 5 other related software. 

III. 

Lexicography 

20 As used herein, use of the following terms refer or relate to aspects of the 

invention as described below. 



• personalized information - As used herein, the phrase "personalized information" 
includes any data collected by, from or about a user or a web site that can be stored on a 
25 personal data server. 

Personalized information can include one or more of the following: financial information 
(such as bank account balances, credit information, loan information, real estate 
information, stock account balances, stock portfolio information, or other financial 
30 information); medical information (such as allergy information, insurance information, 
medication information, patient history information, or other medical information; or 
other information specific to an individual or not generally available to the public. 
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Personalized information can also include information of personal interest to an individual 
user, even if that information is not specific to an individual and still generally available to 
the public, but of specific interest to the individual, such as personalized news or other 
generic information asked for by the individual user in a specific way. This can include 
(1) information about selection of the individual user's child in a classroom or sports team 
in a league; (2) news items of interest to the individual user; (3) bids at auction sites made 
by or otherwise of interest to the individual user; (4) web-email or other communications 
such as chat, instant messaging, or newsgroups, made by or to or otherwise of interest to 
the individual user; (5) last or pending transactions with a stockbroker or other broker or a 
book vendor or other vendor; (6) records of non-monetary accounts, such as frequent flier 
miles or other discount programs; (7) sports information, such as golf scores or a record 
for selected sports teams; or (8) calendar information, such as a status of meeting 
invitations or a personal calendar. 

Personalized information can also include information also information the individual user 
would use to act with, such as for performing e-commerce. For example, personalized 
information can include information to automate purchases, such as the individual user's 
name and address, credit card number, account number, delivery address and profile of 
delivery preferences, or the individual users' preferred account for purchases. 

summarization and aggregation - As used herein, the phrase "summarization and 
aggregation" includes all techniques and methodologies for the organization, selective or 
nonselective segregation, linking, selective presentation and selective transfer of 
personalized information. 

Summarization or aggregation can include one or more of the following: adding or 
totaling account balances or account values, adding or totaling securities holdings from 
individual accounts, computing or determining a blend of multiple sources of credit 
information or other financial information, or other forms of summarization or 
aggregation that present a more global picture from more specific information. For 
multiple individuals, summarization or aggregation can include those forms of 
demographic or population grouping used in census, insurance, or market research 
applications. 
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Summarization or aggregation can include a default set of information to summarize or to 
aggregate, a selection by an individual user of preferences or what specific information to 
summarize or to aggregate, or a request by an individual user to summarize or aggregate 
using an editor or other tool. 

personal data server - As used herein, the phrase "personal data server" includes a 
server device which has access to web sites that include personalized information, as 
described above, and can include access information or preferences of an individual user 
for retrieving or using that personalized information. The personal data server can also 
have access to web sites with information of personal interest to the individual user, even 
when that information is not specific to that particular individual user. 

individual user - As used herein, the phrase "individual user" includes any person who 
acts either on behalf of themselves or an entity and manipulates a web client in such a way 
as to gain access to the Internet and who manipulates that web client so as to use, add to, 
aggregate, summarize, delete, or access data contained on a personal data server that is 
unique to them or the entity they represent. 

web site - As used herein, the phrase "web site" includes any combination of devices or 
software taking on the role of a server in a client-server environment in the Internet, the 
world wide web, or an equivalent or extension thereof. There is no particular requirement 
that the web sites 130 must be individual devices. They can each be a single device, a set 
of cooperating devices, a portion of a device, or some combination thereof. 

jump page - As used herein, the phrase "jump page" refers to a web page used by the 
personal data server to present personalized data that the individual user can peruse. The 
"jump page" can also be used to navigate directly to one or more web sites having that 
information at hand. 

navigate - As used herein, the phrase "navigate" includes activities whereby by a an 
individual user uses a web client to access information and move from one web site to 
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another web site, one web page to another web page, within a web page, and onto and off 
of an internet, intranet or other network. 



e-commerce or electronic commerce - As used herein, the phrase "ecommerce" or 
"electronic commerce' 5 includes all commercial, business, professional and investment 
activities conducted over the Internet, an intranet or any type of network. 

inter-user communication and interest groups - As used herein, the phrase "inter-user 
communication" and "interest groups" refers to any communication among users of a 
network or to any communication between user of a network and a USENET, or 
computer bulletin board, or newsgroup or the group involved in the aggregation and 
transfer of information. 

limited access or aggregate access - As used herein, the phrase "limited access" or 
aggregate access" refers the how much of an individual user's personal data is made 
available to persons or entities other than the user. These limits can be set by the 
individual or by a pre-selected protocol. For example, an individual user may make the 
entirety of his medical records available to any medical professional. Alternately, the 
individual user may make only small portion of those records available to their personal 
physician. 

persons or entities other than the individual - As used herein, the phrase "persons or 
entities other than the individual" includes all persons or entities other than the individual 
user. For instance, it may include a government agency, an insurer or other third party 
authorized to access personalized information, or a web site or other network link that 
attempts to retrieve information concerning an individual user. 

m eta -bookmark - As used herein, the phrase "meta-bookmark" includes data structures 
and techniques for accessing a web object, including information relating to a location of 
that web object and information relating to access control, or authorization or 
identification of an entity seeking to access that web object. 
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For example, a meta-bookmark can include one or more of the following: (1) a link or 
pointer to a web object ordinarily requiring a cookie or password for access, (2) a link or 
pointer to a partially completed form, where some of the form fields, such as a login name 
or a password, have restricted presentation, or (3) a link or pointer to an application or 
5 applet that compiles aggregate information from personalized information. 

A meta-bookmark can include a bookmark such as "buy this stock," which includes a link 
or pointer to a selected web site with a specific action, such as to login to a selected 
stockbroker, to select a stock for purchase, and to order purchase of that stock in a 
10 selected amount. 

System Elements 

Figure 5 shows a block diagram of a system for summarization and 
15 aggregation of personalized information. 

A system 100 includes a set of web clients 1 10, a communication network 120, 
at least one web site 130, and a personal data server 140. 

20 As used herein, the terms "client" and "server" refer to relationships between 

the client and the server, not necessarily to particular physical devices. 

As used herein, the phrase "web client" includes any combination of devices 
or software taking on the role of a client in a client-server environment in the Internet, the 
25 World Wide Web, or an equivalent or extension thereof. There is no particular requirement 
that the web clients 1 10 must be individual devices. They can each be a single device, a set of 
cooperating devices, a portion of a device, or some combination thereof (such as for example 
a device providing web server services that acts as an agent of the user). 

30 As used herein, the phrase "web site" includes any combination of devices or 

software taking on the role of a server in a client-server environment in the Internet, the world 
wide web, or an equivalent or extension thereof. There is no particular requirement that the 
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web sites 130 must be individual devices. They can each be a single device, a set of 
cooperating devices, a portion of a device, or some combination thereof. 



As used herein, the phrase "client device" includes any device taking on the 
5 role of a client in a client-server relationship (such as an HTTP web client and web server). 
There is no particular requirement that any client devices must be individual physical devices; 
they can each be a single device, a set of cooperating devices, a portion of a device, or some 
combination thereof. 

10 As used herein, the phrase "server device" includes any device taking on the 

role of a server in a client-server relationship. There is no particular requirement that server 
devices must be individual physical devices; they can each be a single device, a set of 
cooperating devices, a portion of a device, or some combination thereof. 

15 The web clients 1 10 each include a processor operating under control of web 

client software 111, such as a web browser, and disposed for use by an operator or user 1 12. 
In a preferred embodiment, the web client software 1 1 1 includes software disposed for 
communicating with the web site(s) 130 using a communication protocol, as described below. 

20 In a preferred embodiment, the web clients 110 each include a general-purpose 

computer, such as a laptop or workstation. However, the web clients 110 can also include 
(either alone or in conjunction with a laptop or workstation), a hand-held calendar (such as a 
"Palm Pilot" or other hand-held device), a portable computer, a special purpose computer, a 
cellular telephone or other telephonic device, a web server acting as the agent for a user, or 

25 another device. In alternative embodiments, the web clients 1 10 may also include any other 
device disposed for performing the all or some functions described herein. The location, the 
type of device, and the nature of the connection of the web clients 1 1 0 to the web sites 1 30 
can each differ between pairs of connection sessions between the web clients 1 10 and the web 
sites 130. 

30 

In a preferred embodiment, the communication network 120 includes a packet 
switched network such as the Internet, as well as (in conjunction with or instead of) an 
intranet, an enterprise network, an extranet, a virtual private network, a virtual switched 
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network. In alternative embodiments, the communication network 120 may include any other 
set of communication links that couple the web clients 1 10, web site 130, and personal data 
server 140 so they can perform the functions described herein. 

5 The communication network 120 is disposed for transporting messages 151 

between any two of the web clients 110, the web site 130, and the personal data server 140. 
The messages 151 are formatted in the communication protocol recognized by the web clients 
1 10, the web site 1 30, and the personal data server 140. In a preferred embodiment, the 
communication protocol includes TCP/IP (transfer control protocol/ Internet protocol), or 

10 HTTP (hypertext transfer protocol) a variant thereof, such as HTTPS (secure HTTP). In a 
preferred embodiment, the communication protocol can include an additional protocol 
operating over TCP/IP. The communication protocol can also include other protocols for 
requesting and sending information, including FTP (file transfer protocol), Gopher, and 
variants thereof. Although the description refers herein primarily to HTTP and TCP/IP, those 

15 of ordinary skill in the art will recognize, after perusing this application, that use of the 
invention with other protocols would not require new invention or undue experimentation. 

In a preferred embodiment, those messages 151 that request information can 
include an identifier 152 for a requested page 153. The page 153 includes a set of 
20 information, possibly including data in one of a number of formats, and possibly also includes 
a set number of links 1 54 to other pages 153. Each link 1 54 includes an identifier 1 52 for its 
target page 153, and information about the target page 153 (such as a title). 

In a preferred embodiment, each page 1 53 can include data in the form of text, 
images (still or animated), sound, program fragments (such as applets, applications, or 
25 JavaScript), or combinations thereof. 

In a preferred embodiment, the web site 130 includes a processor operating 
under control of web server software 131, and disposed for delivering information 132 to the 
web clients 1 10 or the personal data server 140 in response to requests made using the 
30 communication protocol. In a preferred embodiment, the web site 130 includes software 
disposed for communicating with the web clients 1 10 or the personal data server 140 using 
the communication protocol. 
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The personal data server 140 includes a processor operating under control of 
both web client software 1 1 1 and web server software 141 . In a preferred embodiment, the 
5 web client software 1 1 1 includes software disposed for communicating with the web site(s) 
130, as described below, while the web server software 141 includes software disposed for 
communicating with the web client 1 10, as described below. 

The personal data server 140 includes an access database 142 or other data 
10 structure including information regarding a set of individual users. The access database 142 
includes, for each individual user, a set of web sites 130 having personalized information for 
that individual user, and a corresponding set of access information for each individual user for 
each web site 130, such as a login name and a password. In a preferred embodiment, the 
personal data server 140 also includes authentication information for each individual user, so 
15 that the personal data server 140 only presents personalized information to the correct 
individual user. 

The personal data server 140 is disposed for using the access database 142, at 
the request of an individual user using a web client 110, for accessing those web sites 130 in 
20 the access database 142 and obtaining a set of personalized information about the individual 
user. The personal data server 140 includes a personalized information database 143 with this 
information, and dynamically generates a jump page 144 or other presentation of the 
personalized information for use by the individual user. 

25 In a preferred embodiment, the jump page 144 includes at least a summary of 

the personalized information obtained from each web site 130, and a hyperlink or other 
pointer to that web site 130 for detailed review or manipulation of that personalized 
information by the individual user. 

30 The hyperlink or other pointer includes an address, such as a URL (uniform 

resource locator) for the personalized information, and also includes access information for 
that personalized information. For example, the hyperlink or other pointer can include a 
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sequence of web navigation operations (such as links to links, links with forms with data 
already completed, links requiring login names and passwords, or some combination thereof). 



10 



20 



The individual user can obtain the hyperlink or other pointer from the jump 
page, either for later use, or for distribution to another entity. The saved or transmitted 
hyperlink or other pointer is a meta-bookmark 145. In a preferred embodiment, the individual 
user can set properties for the a meta-bookmark 145, such as a limitation on data available 
using the meta-bookmark 145, a limitation on distribution, a password for use, an expiration 
date, or some combination thereof. 



In a preferred embodiment, the meta-bookmark 145 can include (or the 
personal data server 140 can otherwise provide), automated completion of forms and 
automated responses to applets, JavaScript or Java applications. This allows the individual 
user to provide access information to be used by the personal data server 140, either in 
15 conjunction with use of a meta-bookmark 145 or otherwise, in which the web site 1 30 uses a 
technique for access to the personalized information that is relatively more interactive than 
providing a cookie, login name or password. 



Method of Operation 

Figures 6 and 7 collectively show a process flow diagram for a method of 
using a system for summarization and aggregation of personalized information. 



A method 200 is performed by the system 100. Although the method 200 is 
25 described serially, the steps of the method 200 can be performed by separate elements in 
conjunction or in parallel, whether asynchronously, in a pipelined manner, or otherwise. 
There is no particular requirement that the method 200 be performed in the same order in 
which this description lists the steps, except where so indicated. 



30 Access to Jump Page 



At a flow point 210, the personal data server 140 is ready to receive a request 
from an individual user for personalized information. 
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At a step 21 1, the individual user manipulates a web client 1 10 so as to access 
the communication network 120 and establish a connection between the web client 110 and 
the personal data server 140. 

5 

At a step 212, the personal data server 140 identifies and authenticates the 
individual user at the web client 110. In a preferred embodiment, the personal data server 140 
can perform this step using a cookie stored at the web client 1 10, or using a login name or 
password for the individual user, a digital identifier, or any other form of identification and 
10 authentication. 

For example, the digital identifier can include one for a hardware device 
operating as part of the web client 110, including a processor, a cellular telephone EIN, a 
caller-ID telephone number, or an identifier from an Internet service provider. This would be 
15 useful when the web client 1 1 0 is operating in conjunction with a device not directly coupled 
to the Internet, such as a handheld computer (such as a Palm Pilot), a pager, or a telephone 
(cellular or with interactive voice response). 

At a step 213, the personal data server 140 retrieves, from its access database 
20 142, access information for the individual user. 

At a step 214, the personal data server 140 uses the access information to 
contact each web site 130 associated with the individual user, and to obtain personalized 
information for that individual user. 

25 

At a step 215, the personal data server 140 dynamically, in response to the 
personalized information it gleaned in the step 214, generates a jump page 144 for the 
individual user. As part of this step, the personal data server 140 computes or determines any 
aggregate information, in response to a profile it maintains for the individual user (or in 
30 response to a request by the individual user), for inclusion on the jump page 1 44. 

At least a portion of the jump page 144 can be prepared in advance of the 
request made by the individual user, such as prepared in advance at a selected time of day or 
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at a selected frequency. Moreover, at least a portion of the jump page 144 can be updated in 
response to a selected time of day, a selected frequency, at the request of the individual user, 
or in response to information from the web site. 

5 At a step 216, the personal data server 140 sends the jump page 144 to the web 

client 1 10 so as to present the personalized information to the individual user for review. 



At a step 217, the individual user manipulates the web client 1 10 to review the 
10 jump page 144, and determine whether to perform further operations with regard to the 
personalized information. If so, the method 200 proceeds with the next step. If not, the 
method 200 proceeds at the flow point 21 0 or the flow point 220 or the flow point 230. 

At a step 218, the individual user manipulates the web client 1 10 to perform 
15 further operations with regard to the personalized information. As part of this step, the 
individual user can perform one or more of, or some combination of, the following 
operations: 

• The individual user can select a hyperlink or pointer on the jump page 144 to "click 
20 through" to a selected web site 130 having personalized information. As part of this 

operation, the individual user can manipulate the web client 1 10 so as to interact directly 
with the web site 130 with regard to the personalized information (or other information). 

• The individual user can save or send a hyperlink or pointer on the jump page 144 as a 
25 meta-bookmark 145. 

• The individual user can review and manipulate personalized information at the web site 
130 using the hyperlinks or pointers on the jump page 144. 

30 

At a flow point 220, the personal data server 140 is ready to receive a request 
from an individual user to alter access information or preferences. 
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At a step 221, similar to the step 21 1, the individual user manipulates a web 
client 1 10 so as to access the communication network 120 and establish a connection between 
the web client 1 10 and the personal data server 140. If the connection was already established 
at the step 211, this step is optional. 

5 

At a step 222, similar to the step 212, the personal data server 140 identifies 
and authenticates the individual user at the web client 110. If identification and authentication 
were already performed at the step 212, this step is optional. 

10 At a step 223, the personal data server 140 dynamically, in response to the 

access information or preferences it maintains for the individual user, generates an access or 
preference page for the individual user, similar to the jump page 144. 

The access data may include at least one or more of, or some combination of, 
15 the following: name, address, Social Security number, names and ages of children, clothing 
sizes, medical information pertaining to the user, their spouse or other family number, type, 
date and amount of past purchases, number and type of pets, income data, address of user's 
work, users work phone numbers, links to web sites, information gleaned from other web 
sites. 

20 

At a step 224, similar to the step 216, the personal data server 140 sends the 
access or preference page to the web client 1 10 so as to present the access or preference 
information to the individual user for review. 

25 At a step 225, similar to the step 217, the individual user manipulates the web 

client 1 10 to review the access or preference page, and determine whether to perform further 
operations with regard to the personalized information. If so, the method 200 proceeds with 
the next step. If not, the method 200 proceeds at the flow point 210 or the flow point 220 or 
the flow point 230. 

30 

At a step 226, similar to the step 21 8, the individual user manipulates the web 
client 1 10 to perform further operations with regard to the personalized information. As part 
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of this step, the individual user can perform one or more of, or some combination of, the 
operations described with regard to the step 218. 



At a flow point 230, the personal data server 140 is ready to receive a request 
from an individual user to allow access to personalized information by other entities. 

At a step 23 1 , similar to the step 211, the individual user manipulates a web 
client 1 10 so as to access the communication network 120 and establish a connection between 
the web client 1 10 and the personal data server 140. If the connection was already established 
at the step 21 1, this step is optional. 

At a step 232, similar to the step 212, the personal data server 140 identifies 
and authenticates the individual user at the web client 110. If identification and authentication 
were already performed at the step 212, this step is optional. 

At a step 233, the personal data server 140 records the request from an 
individual user to allow access to personalized information by other entities. 

At a step 234, similar to the step 21 1 through the step 218, an entity other than 
the individual user can establish a connection with the personal data server 140, identify and 
authenticate itself as an entity authorized to review personal information for one or more 
individual users, and access that personalized information. In a preferred embodiment, the 
personal data server 140 allows only aggregate or otherwise limited access to the personalized 
information, as directed by the individual user. 

For example, the individual user might choose to aggregate medical 
information or aggregate information concerning family pets. Limited access to aggregated 
information ensures that only relevant information is sent to the other entity. Thus, 
aggregating medical data for family members and veterinary data for pets, the individual user 
can restrict their childrens 5 medical records from being set to a veterinary service. 



The method 200 continues at the flow point 2 1 0 or the flow point 220 or the 
flow point 230. 
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Generality of the Invention 

The invention has general applicability to various fields of use, not necessarily 
5 related to e-commerce as described above. For example, these fields of use can include one 
or more of, or some combination of, the following: 

• Access to census, demographic, marketing, or other population information - personalized 
information regarding individual users (in these or related fields) can be reviewed and 

10 manipulated by individual users or other entities. Similarly, personalized information 

regarding individual users in other fields, such as medical or psychological information; or 
teaching, training, or other skill-graded data (such as college records) can be reviewed and 
manipulated by individual users or other entities. 

• Use in conjunction or parallel with automated form completion - the individual user can 
use personalized information (either aggregated, limited, or not), to conduct automated 
form completion, without having to repeatedly provide that information. Similarly, the 
individual user can permit access to personalized information (either aggregated, limited, 
or not), by other entities to facilitate these or related techniques. 

• Use in conjunction or parallel with e-commerce - the individual user can use personalized 
information (either aggregated, limited, or not), to conduct e-commerce without having to 
repeatedly provide that information. Similarly, the individual user can permit access to 
personalized information (either aggregated, limited, or not), by other entities to facilitate 
e-commerce. 

• Use in conjunction or parallel with inter-user communication - the individual user can use 
personalized information (either aggregated, limited, or not), to conduct inter-user 
communication, such as bulletin boards or mailing lists, electronic "chat," interest groups, 

30 or related techniques, without having to repeatedly provide that information. Similarly, 
the individual user can permit access to personalized information (either aggregated, 
limited, or not), by other entities to facilitate these or related techniques. 
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Other and further applications of the invention in its most general form, would 
be clear to those skilled in the art after perusal of this application, and are within the scope 
and spirit of the invention. 

IV. 

Lexicography 

The following terms refer or relate to aspects of the invention as described 
below. The descriptions of general meanings of these terms are not intended to be limiting, 
only illustrative. 

• automated new-user registration — in general, a technique for registering a new user 
with a web site, in which personalization information about the user is sent to the web site 
in an automated manner and without need for substantial user input 

• data input — in general, sending data from a web client to a web site that requests that 
data 

• descriptive text — in general, text or other descriptive presentation information (such as 
a graphic, a picture, or an icon) indicative of the nature of data requested for a selected 
field of a structured data input form 

• differing types of structured data forms — in general, structured data forms having 
differing purposes, such as (1) requesting information to register a new user with a web 
site, (2) logging in an already-registered user with a web site, or (3) completing, approving 
or confirming an e-commerce transaction 

• forms for structured data input — in general, a structured presentation, such as a 
graphic or picture, used to request data input from a user (typically an HTML or XML 
form) 
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helper application — in general, software at the web client used to assist the 
personalization software in recognizing web pages and differing types of structured data 
forms 

input field — in general, a logical data field designated to request selected types of 
information from the user 

logical field value — in general, a logical descriptor of a type of information requested 
for a selected input field 

meta-bookmark — in general, a command, selected through a bookmark or another user 
interface element at the client, that associates a selected web page or URL, such as a 
current web page or URL, with a script or program fragment for taking selected actions 
with regard to that web page or URL 

multiple or partial data values — in general, a reassignment of partial data values or 
multiple data values for a single selected input field of a structured data form, such as 
distinguishing (year, month, day) for a single value of (date), or combining multiple 
values of (address, state, country) into a single value of (postal address) 

personalization server — in general, a device used to assist the web client in sending 
personalized information to one or more web sites 

personalization software — in general, software at the personalization server or at the 
web client used to assist the web client in sending personalized information to a web site, 
which collects information about a user or sending the information directly from the 
personalization server to the web site 

pre-recorded personal information — in general, information used by the 
personalization software, describing the user of the web client 
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• program fragment — in general, software at the web client (such as JavaScript, a Java 
applet, or another type of macro language program) for performing a selected 
programmable activity with regard to a web page (or URL) 

5 • screen location — in general, a positional reference in a presentation of data to the user, 
such as a selected line of a structured data form 

• user — in general, an individual using or operating a web client 
10 • web browser — in general, web client software for use by a user 

• web page for confirming an e-commerce transaction — in general, a web page (whether 
statically or dynamically generated) having the purpose of requesting information for, or 
confirmation of, an e-commerce transaction 

15 

• web page for new-user registration — in general, a web page (whether statically or 
dynamically generated) having the purpose of requesting information about a new user to 
be registered at a web site 

20 • web page for user login — in general, a web page (whether statically or dynamically 
generated) having the purpose of requesting information about a user who has already 
been registered at a web site 

As noted above, these descriptions of general meanings of these terms are not 
25 intended to be limiting, only illustrative. Other and further applications of the invention, 
including extensions of these terms and concepts, would be clear to those of ordinary skill in 
the art after perusing this application. These other and further applications are part of the 
scope and spirit of the invention, and would be clear to those of ordinary skill in the art, 
without further invention or undue experimentation. 

30 

System Elements 
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Figure 8 shows a block diagram of a system for automated and intelligent 
structured data input. 



A system 100 includes a web client 1 10, a web site 120, a communication link 
5 130, and a personalization server 1 60. 

The web client 1 1 0 includes a processor, program and data memory, and mass 
storage, operating under control of web client software (not shown) to perform the functions 
of a web client or web browser. The web client is operated by a user 111, and includes an 
10 input device 1 12 and a presentation device 113. In a preferred embodiment, the web client 
software can include the "Netscape Navigator" product from America On Line or the 
"Internet Explorer" product from Microsoft Corporation. 

Similar to the web client 1 10, the web site 120 includes a processor, program 
15 and data memory, and mass storage, operating under control of web server software (not 
shown) to perform the functions of a web server or web site. The web site 120 includes a set 
of web pages 121 for sending to the web client 110 (upon request of the web client 1 10), 
including at least one web page 121 having a structured data form 122 for requesting 
information from the web client 110. 

20 

The communication link 130 includes a technique for sending and receiving 
messages between the web client 110 and the web site 120. In a preferred embodiment, the 
communication link 130 includes an Internet, intranet, extranet, virtual private network, or 
other technique for communication. In a preferred embodiment, the communication link 130 
25 operates using the HTTP protocol (or a variant thereof), so as to send and receive web page 
requests and web pages. 

Similar to the web client 1 10, the personalization server 160 includes a 
processor, program and data memory, and mass storage, operating under control of 
30 personalization software 140 to perform the functions described herein. 

System Data Flow 
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Figure 9 shows a data flow diagram of the system for automated and intelligent 
structured data input. 



The system 1 00 includes a set of data flows for sending and receiving 
5 information between the web client 1 1 0 and the web site 120, using the communication link 
130. 

A data flow 210 includes a set of messages between the web client 1 10 and the 
web site 120, in which the web client 1 10 is assisted by a set of personalization software 140 
10 logically local to the web client 1 10 to enter data for structured data forms, so as to send that 
data to the web site 120. 

The web client 110 sends a message 21 1 to the web site 120, requesting a 
selected web page. 

15 

The web site 120 responds to the message 21 1 by sending a message 212 to the 
web client 1 10, presenting a structured data form and requesting information from the web 
client 110. 

20 The web client 1 10 recognizes the structured data form, using the 

personalization software, which assists the user with data input. 

The web client 1 10 collects the information responsive to the structured data 
form (whether from the personalization software or from the user) and sends a message 213 
25 with that information to the web site 1 20. As part of doing so, the web client 1 1 0 can obtain 
the information from the personalization server 160 when that information is available at the 
personalization server 160, or from the user of the web client 1 10. 



30 



Once the information is sent to the web site 120, the data flow 210 is complete. 

A data flow 220 includes a set of messages between the web client 1 10 and the 
web site 120, in which the web client 1 10 is assisted by the personalization software 140 to 
perform a program fragment associated with a meta-bookmark. 
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The web client 110 sends a message 221 to the web site 120 requesting a 
selected web page. 

5 The web site 120 sends a message 222 to the web client 1 10 including the 

selected web page. 

The personalization software 140 at the web client 1 10 performs the following 

tasks 

10 

• a portion thereof recognizes the selected web page; 

• a portion thereof completes a form or other data entry for the selected web page at the web 
site; 

15 

and 

• a portion thereof completes a form or other data entry for the selected web page at the 
client device. 

20 Once the actions associated with the personalization software 140 are 

performed, the data flow 220 is complete. 

A data flow 230 includes a set of messages to the web site 120, in which 
personalization software 140 at the personalization server 160 performs automated new-user 
, 25 registration for the user of the web client 1 1 0 at a plurality of web sites 1 20. 

The personalization software 140 sends a message 23 1 from the 
personalization server 160 to a set of selected web sites 120 including a request for a new-user 
registration web page. 

30 

Each selected web site 120 sends a message 232 to the personalization server 
160 including the new-user registration web page. 
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The personalization software 140 at the personalization server 160 responds to 
each new-user registration web page by sending a message 233 to the associated web site 120 
including information for registering the user at that web site 120. 

Once the user is registered at the plurality of web sites 120, the data flow 230 

is complete. 

A data flow 240 includes a set of messages between the web client 1 10 and the 
web site 120, in which a helper application 150 assists the personalization software in 
recognizing differing types of structured data forms and directing the personalization software 
how to enter data for those differing types of structured data forms. 

The web client 110 sends a message 241 to a selected web site 120 including a 
request for a selected web page. 

The web site 120 sends a message 242 to the web client 110 including the 
selected web page. 

The helper application 150 intercepts the selected web page, and determines if 
the web page is a web page for user registration, a web page for user login, or a web page for 
confirming an e-commerce transaction. The helper application 150 so informs the 
personalization software 140. 



The personalization software 140 exchanges a sequence of messages 243 with 
the web site 120, in which the personalization software 140 sends information requested by 
the web site 120 to perform operations associated with the web page. 

Once the operations associated with the web page have been performed, the 
data flow 240 is complete. 



Method of Operation 
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Figure 10 shows a process flow diagram of a first method for operating a 
system for automated and intelligent structured data input. 



A method 300 includes a set of flow points and steps. 

5 

At a flow point 310, the user operating the web client 1 10 is ready to be 
assisted by personalization software that identifies forms for structured data input and assists 
the user with data input. 

10 At a step 311, the user operating the web client 1 1 0 selects a web page at the 

web site 120. 

At a step 312, the web site 120 sends the web page to the web client 110. 

15 At a step 313, personalization software 140 identifies the web page as 

including a structured data form for data input. 

At a step 314, the personalization software 140 identifies each relevant input 
field in the form with a set of descriptive text. In a preferred embodiment, the descriptive text 
20 includes information presented as part of the web page for the user of the web client 1 1 0 to 
determine what information is being requested. 

At a step 3 1 5, the personalization software 1 40 associates each set of 
descriptive text with a logical field value. In a preferred embodiment, the personalization 
25 software 140 references each set of descriptive text with a dictionary of likely descriptive text, 
and thereby associates each set of descriptive text with a logical field value. For example, 
where the descriptive text is the character string "NAME", the logical field value can indicate 
that the requested data is <name of user>. 

30 At a step 3 1 6, the personalization software 1 40 associates each relevant input 

field in the form with a screen location for presentation, such as with a specific set of 
descriptive text or a specific logical field value responsive to a proximity relationship between 
screen location for title and content in the form. In a preferred embodiment, the screen 
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location can be a relative position with regard to a second screen location for a second set of 
descriptive text. 



At a step 317, the personalization software 140 associates each screen location 
with a logical field value. For example, the personalization software 140 can determine that a 
screen location for requesting <name of user> is likely to be placed above a screen location 
for requesting <address of user>. 

At a step 3 18, the personalization software 140 associates each logical field 
value with multiple data values or partial data values. For example, as noted above, the 
logical field values for <first name> and <last narne> might be combined into a single logical 
field value for <name of user>. 

At a step 319, the personalization software 140 identifies personalization 
information associated with each logical field value, and sends that information to the web 
site 120 in association with each logical field value. In a preferred embodiment, this step is 
performed without requirement for substantial user input. In alternative embodiments, the 
user may be asked for confirmation (or for completing unknown values) of one or more items 
of data for such logical field values. 

Figure 1 1 shows a process flow diagram of a second method for operating a 
system for automated and intelligent structured data input. 

A method 400 includes a set of flow points and steps. 

At a flow point 410, the user operating the web client 1 10 is ready to be 
assisted by personalization software that performs a meta-bookmark. 

At a step 41 1 , the user operating the web client 110 selects a web page at the 

web site 120. 

At a step 412, the web site 120 sends the web page to the web client 110. 



71 



WO 00/48110 PCT/US00/03790 
At a step 41 3 ? personalization software 140 identifies the web page as being 
associated with a meta-bookmark (and thus being associated with a script or program 
fragment to be performed). 

5 At a step 414, the personalization software 140 identifies the associated script 

or program fragment associated with the meta-bookmark. [*** on the server ***] 

At a step 415, the personalization software 140 performs the associated script 
or program fragment associated with the meta-bookmark. 



10 



15 



Figure 12 shows a process flow diagram of a third method for operating a 
system for automated and intelligent structured data input. 

A method 500 includes a set of flow points and steps. 

At a flow point 5 1 0, the user operating the web client 1 1 0 is ready to be 
assisted by personalization software that performs automated new-user registration for the 
user of the web client 1 10 at a plurality of web sites 120. 



20 At a step 511, the personalization software 140 sends the message 23 1 to a set 

of selected web sites 120 including a request for a new-user registration web page. 

At a step 512, each selected web site 120 sends the message 232 to the web 
client 1 10 including the new-user registration web page. 

25 

At a step 513, the personalization software 140 responds to each new-user 
registration web page by sending the message 233 to the associated web site 120 including 
information for registering the user at that web site 120. 

30 Figure 13 shows a process flow diagram of a fourth method for operating a 

system for automated and intelligent structured data input. 



A method 600 includes a set of flow points and steps. 
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At a flow point 610, the personalization software 140 at the web client 1 10 is 
ready to be assisted by the helper application 150 that assists the personalization software in 
recognizing differing types of structured data forms and directing the personalization software 
5 how to enter data for those differing types of structured data forms. 

At a step 61 1 , the web client 1 1 0 requests a selected web page from the web 

site 120. 

10 At a step 612, the web site 120 sends the selected web page to the web client 

110. 

At a step 613, the helper application 150 intercepts the selected web page, and 
determines if the web page is a web page for user registration, a web page for user login, or a 
1 5 web page for confirming an e-commerce transaction. 

At a step 614, the helper application 150 informs the personalization software 
140 of the web page type. 

20 At a step 615, the personalization software 140 responds to the web site 120, 

depending on the web page type. In a preferred embodiment, this step includes a sub-step 
615(a), in which the personalization software 140 performs operations suited to a web page 
for user registration; an alternative sub-step 615(b), in which the personalization software 140 
performs operations suited to a web page for user login; and an alternative sub-step 615(c), in 

25 which the personalization software 140 performs operations suited to a web page for 
confirming an e-commerce transaction. 

Figure 14 shows a process flow diagram of a fifth method for operating a 
system for automated and intelligent structured data input. 

30 

A method 700 includes a set of flow points and steps. 
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At a flow point 710, the personalization software 140 at the personalization 
server 160 is ready to automate recognition of recognizing differing types of structured data 
forms and entering data those differing types of structured data forms directly from the 
personalization server 160. 

5 

At a step 71 1, the web client 110 requests a selected web page from the web 

site 120. 

At a step 712, the web site 120 sends the selected web page to the web client 

10 110. 

At a step 713, the helper application 150 intercepts the selected web page, and 
determines if the personalization software 140 at the personalization server 160 is able to 
automate operations from the selected web page. 

15 

At a step 714, the personalization software 140 at the personalization server 
160 automates operations, on behalf of the user of the web client 110, from the selected web 
page. As part of this step, the personalization software 140 at the personalization server 160 
determines the type of the web page (similarly to the method 600) and responds to the web 
20 site 120 (similarly to the method 600). In a preferred embodiment, this step includes the 
performance by the personalization software 140 at the personalization server 160 of all 
operations needed to perform operations for the selected web page (and any successor web 
pages), so that the user need not enter substantial data to perform operations for the selected 
web page. 

25 

For example, when the web client 1 10 is a wireless device for which it is 
relatively difficult to enter large amounts of data, the personalization software 140 at the 
personalization server 160 can automate (a) the entire process of logging the user of the web 
client 110 into a web site, and (b) the entire process of completing and confirming an e- 
30 commerce transaction at the web site on behalf of the user of the web client 1 10. 

Generality of the Invention 
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The invention has general applicability to various fields of use, not necessarily 
related to the services described above. For example, these fields of use can include one or 
more of, or some combination of, the following: 

5 • information transactions and interactions relating to database queries and responses; 

and 

• information transactions and interactions relating to wireless devices and servers 
responsive thereto 

10 

Other and further applications of the invention in its most general form, would 
be clear to those skilled in the art after perusal of this application, and are within the scope 
and spirit of the invention. 

15 I, II, III, and IV. 

Alternative Embodiments 

Although preferred embodiments are disclosed herein, many variations are 
possible which remain within the concept, scope, and spirit of the invention, and these 
20 variations would become clear to those skilled in the art after perusal of this application. 
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1 . A method for access to a plurality of network services, said method 
including steps for 

5 recording a set of authentication information in a database; 

receiving a request to access at least one of said plurality of network services; 

and 

sending, in response to said request to access, said set of authentication 
information to said at least one of said plurality of network services; 
10 whereby a user can maintain a single set of authentication information for said 

plurality of network services. 

2. A method as in claim 1 , wherein said steps for sending include steps for 
routing said set of authentication information through said web client. 

15 

3. A method as in claim 1, wherein said steps for sending include steps for 
routing said set of authentication information directly to said at least one network service 
without routing said information through said web client. 

20 4. A method as in claim 1, said method including steps for 

providing a plurality of profiles of information for one said user; 
selecting one said profile; and 

wherein said profiles include personalization information, and including steps 
for sending said personalization information in response to said steps for selecting one said 
25 profile. 



5. A method as in claim 1, said method including steps for 
providing a corresponding plurality of identifiers for said network services, in 
response to a request; 
30 receiving a selection of one said identifier; 

making a request to access an associated network service in response to said 

selection. 
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6. A method as in claim 5, wherein 

said plurality of identifiers includes a page for presentation to said user; and 
said step of selecting includes picking one or more of said plurality of 
identifiers from said page. 



7. A method as in claim 1 , wherein 
said database is maintained at a server; 

said request is sent from a web client to said server, in response to a request by 
a user at said web client; 

10 whereby said server maintains said set of authentication information on behalf 

of said user. 

8. A method as in claim 7, wherein said server is logically remote from 
said web client. 

15 

9. A method as in claim 7, wherein said web client includes a web server 
device acting on behalf of said user. 

10. A method as in claim 1, including steps for 

20 receiving a request to newly access at least one network service not in said 

plurality; 

sending, in response to said request to newly access, a set of personalization 
information to said at least one network service not in said plurality; 

whereby said user is registered at said at least one of network service not in 
25 said plurality without said user having to directly enter said set of personalization information. 

11. A method as in claim 1 , including steps for 

receiving a request to again access at least one network service in said 

plurality; 

30 sending, in response to said request to again access, said set of authentication 

information to said at least one network service in said plurality; 

whereby access for said at least one network service is granted to said user 
without said user having to directly access said set of authentication information. 
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12. A method for enforcing restricted access to a network service, said 
method including steps for 

identifying a network service having access thereto restricted to a first set of 

5 users; 

identifying, for one of said first set of users, a second set of users to have 
access to said network service; 

receiving, from one of said second users, a request for access to said network 

service; and 

10 providing access to said network service to said one second user in response to 

said steps for identifying a second set, and in response to access permitted to said one first 
user identified therewith. 

13. A method as in claim 12, wherein said steps for providing access to 
1 5 said one second user include steps for 

identifying a set of restrictions on said access to said one second user; and 
restricting said access to said one second user in response to said set of 

restrictions. 

20 14. A method as in claim 1 3, including steps for altering said set of 

restrictions in response to a selection by said one first user. 

15. A method as in claim 13, including steps for providing access to said 
one second user in response to access permitted by any one of a plurality of said first users. 

25 

16. A method as in claim 13, including steps for providing access to said 
one second user in response to whether said one second user has access permitted by said one 
first user, or in response to whether said one second user is a member of said set of first users. 

30 1 7. A method as in claim 13, wherein said network service includes at least 

one web site. 
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A method as in claim 13, wherein said set of restrictions include at least 



19. A method as in claim 13, wherein said set of restrictions includes at 
5 least one type of access permitted to said one first user and denied to said one second user. 

20. Apparatus for access to a plurality of network services, said apparatus 

including 

a personalization server having a database, said database including information 
1 0 regarding a plurality of network services, information regarding a set of authentication 
information associated therewith; 

said personalization server being disposed for receiving a first message 
requesting access to one of said network services, and for sending a second message to said 
one network service in response thereto, said second message including said set of 
1 5 authentication information; 

whereby a user can maintain a single set of authentication information for said 
plurality of network services. 

21. Apparatus as in claim 20, wherein said personalization server is 
20 disposed for routing said set of authentication information through said web client. 

22. Apparatus as in claim 20, wherein said personalization server is 
disposed for routing said set of authentication information directly to said at least one network 
service without routing said information through said web client. 

25 

23. Apparatus as in claim 20, including 

accessible by said personalization server, a plurality of profiles of information 
for one said user; 

said personalization server being disposed for receiving a selection message 
30 selecting one said profile, and for selecting said set of authentication information or a set of 
personalization information in response to said selection message. 

24. Apparatus as in claim 20, including 
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a page for presentation to said user including a corresponding plurality of 
identifiers for said network services; 

said personalization server being disposed for making a request to access an 
associated network service in response to receiving a selection of one said identifier. 

5 

25. Apparatus for enforcing restricted access to a network service, said 
apparatus including 

a database associating a set of network services with a first set of users having 
access to said network services, said database associating one of said first set of users with a 
10 second set of users to have access to said network service; and 

a personalization server disposed for providing access to one said network 
service in response to one said second user and in response to said database. 

26. Apparatus as in claim 25, wherein said database includes a set of 
15 restrictions on said access to said one second user. 

27. Apparatus as in claim 26, wherein said network service includes at least 

one web site. 

20 28. Apparatus as in claim 26, wherein said set of restrictions include at 

least one time parameter. 

29. Apparatus as in claim 26, wherein said set of restrictions includes at 
least one type of access permitted to said one first user and denied to said one second user. 

25 

30. A method of doing business, including steps for 

obtaining a single registration for a set of primary users for a group of related 
services provided by one or more processors coupled to a network; 

enforcing restricted access to said single registration for a set of secondary 
30 users associated with said primary users; and 

providing said restricted access to said secondary users in response to 
registrations by said secondary users for said restricted access to said services. 
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31. A method of doing business, including steps for 
maintaining a plurality of profiles for a user; 

obtaining a plurality of registrations for said user for services provided by one 
or more processors coupled to a network; 

wherein said plurality of registrations includes information from at least two of 

said profiles. 



32. A method of doing business, including steps for 

maintaining, at a personalization server, a plurality of registrations for a user 
10 for services provided by one or more processors coupled to a network; 

providing access to said services using said personalization server, in response 
to requests from said user; 

whereby said user can make said requests from more than one of a plurality of 
devices coupled to said network. 

15 

33. A method including steps for 

designating a group of web clients for group access to web sites; 
receiving a selection of a web page for presentation to web clients in said 

group; and 

20 retrieving and presenting said web page to said web clients in said group. 

34. A method as in claim 33, wherein said steps for retrieving and 
presenting include sending at least part of said web page directly from a web server to at least 
one web client in said group. 

25 

35. A method as in claim 33, including steps for 

designating a controlling web client, wherein said selection of said web page is 
received from said controlling web client; 

receiving a selection of a web page for presentation to said controlling web 
30 client without presentation to all said web clients; and 

retrieving and presenting said web page to said controlling web client. 



36. 



A method as in claim 33, including steps for 
81 
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designating a controlling web client, wherein said selection of said web page is 
received from said controlling web client; 

receiving a selection of a restricted-access web page from said controlling web 
client, said restricted-access web page including access control disallowing access to at least 
one web client in said group; 

obtaining access to said restricted-access web page on behalf of said 
controlling web client; and 

retrieving and presenting said restricted-access web page to said web clients in 

said group. 

37. A method as in claim 33, including steps for sending information 
relating to web sites between at least two of said web clients in said group, wherein said 
information includes web page bookmarks or web site registrations. 



15 38. A method as in claim 33, wherein 

said group of web clients includes a plurality of differing types of web clients; 
said steps for receiving and presenting include receiving a plurality of variants 
of said web page, and steps for presenting one of said variants to each said web client. 

20 39. Apparatus including 

a set of web clients; 

a group-surfing server disposed for receiving a selection of a web page at a 
web server, and for retrieving and presenting said web page to said web clients. 

25 40. Apparatus as in claim 39, wherein 

said set of web clients includes at least one controlling web client and at least 
one non-controlling web client; 

said group-surfing server is responsive only to said selection of a web page 
from one or more controlling web clients. 



30 



41 . Apparatus as in claim 39, wherein 
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said selection message indicates a restricted-access web page, said restricted- 
access web page requiring access control information disallowing access to at least one web 
client in said group; 

an access message from said group-surfing server to said web site including 
said access control information; and 

a distribution message from said group-surfing server to said web clients in 
said group including at least some information from said restricted-access web page. 

42. Apparatus as in claim 39, wherein 

each of said web clients includes a program fragment disposed for recognizing 
a selection of a web link at said web server, and for sending a selection message to said 
group-surfing server in response thereto; 

said group-surfing server retrieves at least part of said web page from said web 
server in response to said selection message. 

43. Apparatus as in claim 42, wherein said program fragment is disposed 
for recognizing a post command from said web client, and for sending a message to said 
group-surfing server in response thereto. 



44. Apparatus as in claim 10, wherein 

said program fragment is disposed for recognizing a post command from said 
web client, and for sending a posting message to said group-surfing server in response thereto; 
and 

said group-surfing server is disposed for receiving a plurality of said posting 
messages from a corresponding plurality of said web clients, and for sending a post command 
to said web server in response thereto. 

45. In a method for presenting web pages to a plurality of web sites in 
conjunction, a data structure including identity or session information relating to a group- 
surfing server acting on behalf of said plurality of web sites. 



46. A data structure as in claim 45, including a plurality of cookies 
received from web sites. 
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47. A data structure as in claim 45, including access control information 
not available to at least one of said plurality of web sites. 

48. A method of doing business, including steps for 

designating a group of web clients for group access to web sites, said group of 
web clients being charged for said group access; 

receiving a selection of a web page for presentation to web clients in said 

group; and 

retrieving and presenting said web page to said web clients in said group. 

49. A method as in claim 48, including steps for 

designating a controlling web client, wherein said selection of said web page is 
received from said controlling web client; 

receiving a selection of a restricted-access web page from said controlling web 
client, said restricted-access web page including access control disallowing access to at least 
one web client in said group; 

obtaining access to said restricted-access web page on behalf of said 
controlling web client; 

retrieving and presenting said restricted-access web page to said web clients in 
said group; and 

charging said group of web clients for said access to said restricted-access web 

page. 

50. A method as in claim 48, including steps for 

sending information relating to web sites between at least two of said web 
clients in said group, wherein said information includes web page bookmarks or web site 
registrations; and 

charging said group of web clients for access to information related to web 

sites. 

51. A method including steps of 

obtaining personalized information for an individual user, on behalf of said 
individual user, from a set of web sites having said personalized information; and 
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presenting said personalized information to said individual user in a format 
other than available at said web sites. 



52. A method as in claim 5 1 , wherein said format includes at least one of: 
5 aggregation or summarization of said personalized information, modification of said 

personalized information without direct interaction between said individual user and any of 
said web sites. 

53. A method as in claim 51, including steps of 

10 maintaining access information for said individual user for at least one of said 

web sites, said access information including sufficient information to perform said steps of 
obtaining; and 

wherein said steps of presenting include steps of dynamically generating a 
presentation including (1) at least some of said personalized information and (2) interaction 
15 information for said individual user to communicate directly with at least one said web site. 

54. A method as in claim 53, wherein said interaction information includes 
at least one hyperlink to a web object at said web site. 

20 55. A method as in claim 53, wherein said interaction information includes 

at least one hyperlink to a web object at said web site, said web object being an object 
requiring authentication or identification information for access from said web site, and said 
authentication or identification information being included in conjunction with said hyperlink. 

25 56. A method as in claim 5 1 , wherein said steps of presenting include steps 

of dynamically generating a presentation including information responsive to an aggregate of 
said personalized information from said web sites. 

57. A method as in claim 56, wherein said aggregate includes at least one 
30 of: a sum of account cash balances, a sum of account securities values. 

58. A method as in claim 5 1 , including steps of 
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maintaining access information for said individual user for at least one of said 
web sites, said access information including sufficient information to perform said steps of 
obtaining; and 

presenting said personalized information to an entity other than said individual 
5 in a format other than available at said web sites. 

59. A method as in claim 58, wherein said steps of obtaining personalized 
information include steps of presenting said access information to said web site without 
delivering said access information to said entity. 

10 

60. A method as in claim 58, including steps of obtaining authorization 
from said individual user to present said personalized information to said entity. 

61. A method as in claim 60, wherein said authorization is limited to at 
15 least one of: aggregations of said personalized information, selected portions of said 

personalized information. 

62. A method as in claim 58, including steps of 

performing said steps of maintaining and obtaining for a plurality of said 
20 individual users; 

aggregating a set of results of said steps of performing said steps of obtaining 
for said plurality; 

presenting an aggregate result of said steps of aggregating to said entity. 

25 63. A method as in claim 62, wherein said aggregate result includes at least 

one of: account cash balance data, account securities values data, census data, polling data, 
market survey data. 

64. A method of doing business, including steps of 
30 obtaining personalized information for an individual user, on behalf of said 

individual user, from a set of web sites having said personalized information; and 

making said personalized information available to said individual user in a 
transaction not requiring direct contact with those web sites. 
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65. A method as in claim 64, wherein said format includes wherein said 
format includes at least one of: aggregation or summarization of said personalized 
information, modification of said personalized information without direct interaction between 

5 said individual user and any of said web sites. 

66. A method as in claim 64, including steps of 

maintaining access information for said individual user for at least one of said 
web sites, said access information including sufficient information to perform said steps of 
10 obtaining; and 

presenting said personalized information to an entity other than said individual 
in a transaction not requiring direct contact with those web sites. 

67. A method as in claim 66, wherein said steps of obtaining personalized 
15 information include steps of presenting said access information to said web site without 

delivering said access information to said entity. 

68. A method as in claim 66, including steps of obtaining authorization 
from said individual user to present said personalized information to said entity, wherein said 

20 authorization is limited to at least one of: aggregations of said personalized information, 
selected portions of said personalized information. 

69. A method as in claim 66, including steps of 

performing said steps of maintaining and obtaining for a plurality of said 
25 individual users; 

aggregating a set of results of said steps of performing said steps of obtaining 
for said plurality; 

presenting an aggregate result of said steps of aggregating to said entity. 

30 70. A method as in claim 69, wherein said aggregate result includes at least 

one of: account cash balance data, account securities values data, census data, polling data, 
market survey data. 
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71 . Apparatus including 

a personal data server including a set of personalized information for an 
individual user, said personalized information having been obtained from a set of web sites 
having said personalized information; and 
5 a data structure including said personalized information in a format other than 

available at said web sites. 



72. Apparatus as in claim 71, wherein said data structure includes at least 
one of: an aggregation or summarization of said personalized information, a hyperlink to a 

10 device for modification of said personalized information without direct interaction between 
said individual user and any of said web sites. 

73. Apparatus as in claim 71, including a data structure for said individual 
user, said data structure including 

15 access information for at least one of said web sites, said access information 

including sufficient information to perform said steps of obtaining; and 

interaction information for said individual user to communicate directly with at 
least one said web site. 

20 74. Apparatus as in claim 73, wherein said interaction information includes 

at least one hyperlink to a web object at said web site. 

75. Apparatus as in claim 73, wherein said interaction information includes 
at least one hyperlink to a web object at said web site, said web object being an object 

25 requiring authentication or identification information for access from said web site, and said 
authentication or identification information being included in conjunction with said hyperlink. 

76. Apparatus as in claim 71, including a data structure for said individual 
user, said data structure including 

30 access information for said individual user for at least one of said web sites, 

said access information including sufficient information to perform said steps of obtaining; 
and 
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a data structure including said personalized information in a format other than 
available at said web sites. 



77. Apparatus as in claim 76, wherein said personal data server is disposed 
5 for presenting said data structure to said entity without delivering said access information. 

78. Apparatus as in claim 76, including authorization information for an 
entity other than said individual. 

10 79. Apparatus as in claim 78, wherein said authorization information 

describes a limitation to at least one of: aggregations of said personalized information, 
selected portions of said personalized information. 

80. Apparatus as in claim 76, including a data structure including an 
15 aggregate of said personalized information for a plurality of said individual users, for 

presentation to said entity. 

8 1 . Apparatus as in claim 80, wherein said aggregate includes at least one 
of: account cash balance data, account securities values data, census data, polling data, market 

20 survey data. 

82. A method, including steps of 
accessing a web site from a web client device; 

executing a software module to identify a form at said web site for structured 

25 data input; and 

executing said software module to enter at least some data for said form 
without substantial user intervention. 

83. A method as in claim 82, including steps of automatic registration of a 
30 user at a new web site, automatic login using the login page of a web site, or automatic form 

filling for checking out purchases from multiple web sites. 
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84. A method as in claim 82, wherein said software module includes at 
least a portion executed at a server device other than said web site. 

85. A method as in claim 82, wherein said software module includes at 
5 least a portion executed at said web client device. 

86. A method as in claim 82, wherein said web site includes a personalized 
web page only visible to a selected user after a login process at said web site. 

10 87. A method as in claim 82, including steps of executing said software 

module to enter at least some said data at a plurality of distinct web sites. 

88. A method as in claim 87, wherein said distinct web sites each include a 
web page for confirming an e-commerce transaction. 

15 

89. A method as in claim 87, wherein said distinct web sites each include a 
web page for new-user registration. 

90. A method as in claim 82, wherein said software module attempts to 
20 perform at least one of: 

associating at least one set of descriptive text for said form with a logical field 
value for said form; 

associating at least one screen location for said form with a logical field value 

for said form; 

25 associating at least one logical field value with a set of multiple data values or 

partial data values for said form. 

91. A method as in claim 90, wherein said data values include a name, 
address, telephone number, credit card information, demographic information, preferred login 

30 name or password for said user. 



92. A method as in claim 90, wherein said data values include pre-recorded 
personal information about the user. 
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93. A method as in claim 82, wherein said steps of accessing include 
recognizing a type of said form for structured data input; 

performing said step of executing said software module to enter at least some 
5 data in response to a result of said step of recognizing. 

94. A method as in claim 93, wherein said steps of recognizing include 
determining a difference between a web page for new-user registration, a web 

page for user login, and a web page for confirming an e-commerce transaction. 

10 

95. In a method for entering data in a form without substantial user 
intervention, a data structure including 

an identifier of a web page; 

an association of that web site location with a script or program fragment to be 
1 5 executed for that web page; 

whereby execution of said script or program fragment sends information to a 
server for entering data into said form. 

96. A data structure as in claim 95, wherein said method includes 

20 completing or confirming an e-commerce transaction at a web site associated with said web 
page. 
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300 



ILQ 

The user operating the web client 110 is ready to 
be assisted by personalization software thnl 
identifies forms for structured data input and 
assists the user with data input. 

I 

311 

The user operating the web client 1 10 selects a 
web page at the web site 1 20. 

I 



3J3 

Personalization software MO identifies the web 
page as including a structured data form for data 
input. 

I 

114 

The personalization software 140 identifies each 
relevant input Held in the form with a set of 
descriptive text. 

l 

Hi 

The personalization software 140 associates each 
set of descriptive text with a logical field value. 
In a preferred embodiment, personalization 
soAware 140 references each set of descriptive 
text with a dictionary of likely descriptive text, 
and thereby associates each set of descriptive 
text with a logical field value. 

116 

The personalization so A ware 140 associates each 
relevant input field in the form with a screen 
location for presentation, such as with a specific 
set of descriptive text of a special logical field 
responsive to a proximity relationship between 
the screen location for title and content in the 
form. 

i 

117 

The personalization so A ware 140 associates each 
screen location with a logical field value. 




218 

The personalization software 140 associates each 
logical field value with multiple data values or 
partial data values. 

I 

H9 

The personalization software 140 identifies 
personalization information associates with each 
logical field value and sends that information to 
the web site 120 in association with each logical 
field value. 
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4J0 

The user operating the web client 1 10 is ready to be assisted 
by personalization software that performs a meta-bookmark. 

jr 

411 

The user operating the web client 1 10 selects a web page at 
the website 120 

k 

412 

The web site 120 sends the web page to the web client 1 10. 

^ 

Hi 

Personalization software 140 identifies the web page as being 
a ssociated with a meta-bookmark. 

i 

415 

The personalization software 140 performs the associated 
script of program fragment associated with the meta- 
bookmark. 
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510 

The user operating Ihe web client 1 10 is ready to be assisted 
by personalization software that performs automated new-user 
registration for the use of the web client 1 10 at a plurality of 
web sites 120. 

[ 

511 

The personalization software 140 sends the message 231 to a 
set of selected web sites 120, including a request for a new- 
user registration web page. 

I 

512 

Each selected web site 120 sends the message 232 to the web 
client 1 10 including the new-user registration web page. 

i 

513 

The personalization software 140 responds to each new-user 
registration web page, by sending the message 233 to the 
associated web site 120 including information for registering 
the user at that web site 120. 
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611 

The web client 1 10 requests a selected web page from the web 
site 120. 




613 

The helper application 150 intercepts ihe selected web page 
and determines if Ihe web page is a web page for user 
registration, a web page for user login, or a web page for 
confirming an e-commerce transaction. 



614 

The helper application 150 informs the personalization 
software of the web page type. 



615 

The personalization software 140 responds to the web site 
120, depending on the web page type. In a preferred 
embodiment, this step includes a sub-step 615(a), in which the 
personalization software 140 performs operations suited to a 
web page for user registration; an alternative sub-step 615(b) 
in which the personalization software 140 performs operations 
suited to a web page for user login; and alternative sub-step 
615(c) in which the personalization software 140 performs 
operations suited to a web page for confirming an e-commerce 
transaction. 
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710 

The personalization software MO at the personalization server 
1 60 is ready to automate recognition of differing types of 
structured data forms and entering data about those differing 
types of structured data forms directly from the 
personalization server 1 60. 

I 

ILL 

The web client 1 10 requests a selected web page from the web 
site 120. 

I 

712 

The web site 120 sends the selected web page to the web 
client 1 10. 

l 

713 

The helper application 1 50 intercepts the selected web page, 
and determines if the personalization software at the 
personalization server 160 is able to automate operations from 
the selected web page. 

i 

714 

The personalization software 140 at the personalization server 
160 automates operations, on behalf of the user of the web 
client 1 10, from the selected web page. As part of this step, 
personalization software 140 at the personalization server 160 
determines the type of the web page (similarly to the method 
600) and responds to the web site 120 (also similarly to the 
method 600). 
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